K43520321: NGINX Controller API Vulnerability CVE-2020-5901

🗓️ 21 Feb 2023 18:53:13Reported by f5Type

f5🔗 my.f5.com👁 25 Views

Undisclosed NGINX Controller API endpoints enable reflected Cross Site Scripting (XSS) attack leading to complete system compromis

Reporter	Title	Published	Views	Family All 8
CNVD	F5 NGINX Controller Cross-Site Scripting Vulnerability	12 Jun 202000:00	–	cnvd
CVE	CVE-2020-5901	1 Jul 202014:03	–	cve
Cvelist	CVE-2020-5901	1 Jul 202014:03	–	cvelist
EUVD	EUVD-2020-27055	7 Oct 202500:30	–	euvd
NVD	CVE-2020-5901	1 Jul 202015:15	–	nvd
OSV	CVE-2020-5901	1 Jul 202015:15	–	osv
Prion	Cross site scripting	1 Jul 202015:15	–	prion
RedhatCVE	CVE-2020-5901	22 May 202517:03	–	redhatcve

Vulners

Node

f5 big-ip_aamMatch15.1.0

OR

f5 big-ip_aamMatch15.0.1

OR

f5 big-ip_aamMatch15.0.0

OR

f5 big-ip_aamMatch14.1.2

OR

f5 big-ip_aamMatch14.1.0

OR

f5 big-ip_aamMatch13.1.3

OR

f5 big-ip_aamMatch13.1.1

OR

f5 big-ip_aamMatch13.1.0

OR

f5 big-ip_aamMatch12.1.5

OR

f5 big-ip_aamMatch12.1.4

OR

f5 big-ip_aamMatch12.1.3

OR

f5 big-ip_aamMatch12.1.2

OR

f5 big-ip_aamMatch12.1.1

OR

f5 big-ip_aamMatch12.1.0

OR

f5 big-ip_aamMatch11.6.5

OR

f5 big-ip_aamMatch11.6.4

OR

f5 big-ip_aamMatch11.6.3

OR

f5 big-ip_aamMatch11.6.2

OR

f5 big-ip_aamMatch11.6.1

OR

f5 big-ip_afmMatch15.1.0

OR

f5 big-ip_afmMatch15.0.1

OR

f5 big-ip_afmMatch15.0.0

OR

f5 big-ip_afmMatch14.1.2

OR

f5 big-ip_afmMatch14.1.0

OR

f5 big-ip_afmMatch13.1.3

OR

f5 big-ip_afmMatch13.1.1

OR

f5 big-ip_afmMatch13.1.0

OR

f5 big-ip_afmMatch12.1.5

OR

f5 big-ip_afmMatch12.1.4

OR

f5 big-ip_afmMatch12.1.3

OR

f5 big-ip_afmMatch12.1.2

OR

f5 big-ip_afmMatch12.1.1

OR

f5 big-ip_afmMatch12.1.0

OR

f5 big-ip_afmMatch11.6.5

OR

f5 big-ip_afmMatch11.6.4

OR

f5 big-ip_afmMatch11.6.3

OR

f5 big-ip_afmMatch11.6.2

OR

f5 big-ip_afmMatch11.6.1

OR

f5 big-ip_analyticsMatch15.1.0

OR

f5 big-ip_analyticsMatch15.0.1

OR

f5 big-ip_analyticsMatch15.0.0

OR

f5 big-ip_analyticsMatch14.1.2

OR

f5 big-ip_analyticsMatch14.1.0

OR

f5 big-ip_analyticsMatch13.1.3

OR

f5 big-ip_analyticsMatch13.1.1

OR

f5 big-ip_analyticsMatch13.1.0

OR

f5 big-ip_analyticsMatch12.1.5

OR

f5 big-ip_analyticsMatch12.1.4

OR

f5 big-ip_analyticsMatch12.1.3

OR

f5 big-ip_analyticsMatch12.1.2

OR

f5 big-ip_analyticsMatch12.1.1

OR

f5 big-ip_analyticsMatch12.1.0

OR

f5 big-ip_analyticsMatch11.6.5

OR

f5 big-ip_analyticsMatch11.6.4

OR

f5 big-ip_analyticsMatch11.6.3

OR

f5 big-ip_analyticsMatch11.6.2

OR

f5 big-ip_analyticsMatch11.6.1

OR

f5 big-ip_apmMatch15.1.0

OR

f5 big-ip_apmMatch15.0.1

OR

f5 big-ip_apmMatch15.0.0

OR

f5 big-ip_apmMatch14.1.2

OR

f5 big-ip_apmMatch14.1.0

OR

f5 big-ip_apmMatch13.1.3

OR

f5 big-ip_apmMatch13.1.1

OR

f5 big-ip_apmMatch13.1.0

OR

f5 big-ip_apmMatch12.1.5

OR

f5 big-ip_apmMatch12.1.4

OR

f5 big-ip_apmMatch12.1.3

OR

f5 big-ip_apmMatch12.1.2

OR

f5 big-ip_apmMatch12.1.1

OR

f5 big-ip_apmMatch12.1.0

OR

f5 big-ip_apmMatch11.6.5

OR

f5 big-ip_apmMatch11.6.4

OR

f5 big-ip_apmMatch11.6.3

OR

f5 big-ip_apmMatch11.6.2

OR

f5 big-ip_apmMatch11.6.1

OR

f5 big-ip_asmMatch15.1.0

OR

f5 big-ip_asmMatch15.0.1

OR

f5 big-ip_asmMatch15.0.0

OR

f5 big-ip_asmMatch14.1.2

OR

f5 big-ip_asmMatch14.1.0

OR

f5 big-ip_asmMatch13.1.3

OR

f5 big-ip_asmMatch13.1.1

OR

f5 big-ip_asmMatch13.1.0

OR

f5 big-ip_asmMatch12.1.5

OR

f5 big-ip_asmMatch12.1.4

OR

f5 big-ip_asmMatch12.1.3

OR

f5 big-ip_asmMatch12.1.2

OR

f5 big-ip_asmMatch12.1.1

OR

f5 big-ip_asmMatch12.1.0

OR

f5 big-ip_asmMatch11.6.5

OR

f5 big-ip_asmMatch11.6.4

OR

f5 big-ip_asmMatch11.6.3

OR

f5 big-ip_asmMatch11.6.2

OR

f5 big-ip_asmMatch11.6.1

OR

f5 big-ip_dnsMatch15.1.0

OR

f5 big-ip_dnsMatch15.0.1

OR

f5 big-ip_dnsMatch15.0.0

OR

f5 big-ip_dnsMatch14.1.2

OR

f5 big-ip_dnsMatch14.1.0

OR

f5 big-ip_dnsMatch13.1.3

OR

f5 big-ip_dnsMatch13.1.1

OR

f5 big-ip_dnsMatch13.1.0

OR

f5 big-ip_dnsMatch12.1.5

OR

f5 big-ip_dnsMatch12.1.4

OR

f5 big-ip_dnsMatch12.1.3

OR

f5 big-ip_dnsMatch12.1.2

OR

f5 big-ip_dnsMatch12.1.1

OR

f5 big-ip_dnsMatch12.1.0

OR

f5 big-ip_fpsMatch15.1.0

OR

f5 big-ip_fpsMatch15.0.1

OR

f5 big-ip_fpsMatch15.0.0

OR

f5 big-ip_fpsMatch14.1.2

OR

f5 big-ip_fpsMatch14.1.0

OR

f5 big-ip_fpsMatch13.1.3

OR

f5 big-ip_fpsMatch13.1.1

OR

f5 big-ip_fpsMatch13.1.0

OR

f5 big-ip_gtmMatch11.6.5

OR

f5 big-ip_gtmMatch11.6.4

OR

f5 big-ip_gtmMatch11.6.3

OR

f5 big-ip_gtmMatch11.6.2

OR

f5 big-ip_gtmMatch11.6.1

OR

f5 big-ip_link_controllerMatch15.1.0

OR

f5 big-ip_link_controllerMatch15.0.1

OR

f5 big-ip_link_controllerMatch15.0.0

OR

f5 big-ip_link_controllerMatch14.1.2

OR

f5 big-ip_link_controllerMatch14.1.0

OR

f5 big-ip_link_controllerMatch13.1.3

OR

f5 big-ip_link_controllerMatch13.1.1

OR

f5 big-ip_link_controllerMatch13.1.0

OR

f5 big-ip_link_controllerMatch12.1.5

OR

f5 big-ip_link_controllerMatch12.1.4

OR

f5 big-ip_link_controllerMatch12.1.3

OR

f5 big-ip_link_controllerMatch12.1.2

OR

f5 big-ip_link_controllerMatch12.1.1

OR

f5 big-ip_link_controllerMatch12.1.0

OR

f5 big-ip_link_controllerMatch11.6.5

OR

f5 big-ip_link_controllerMatch11.6.4

OR

f5 big-ip_link_controllerMatch11.6.3

OR

f5 big-ip_link_controllerMatch11.6.2

OR

f5 big-ip_link_controllerMatch11.6.1

OR

f5 big-ip_ltmMatch15.1.0

OR

f5 big-ip_ltmMatch15.0.1

OR

f5 big-ip_ltmMatch15.0.0

OR

f5 big-ip_ltmMatch14.1.2

OR

f5 big-ip_ltmMatch14.1.0

OR

f5 big-ip_ltmMatch13.1.3

OR

f5 big-ip_ltmMatch13.1.1

OR

f5 big-ip_ltmMatch13.1.0

OR

f5 big-ip_ltmMatch12.1.5

OR

f5 big-ip_ltmMatch12.1.4

OR

f5 big-ip_ltmMatch12.1.3

OR

f5 big-ip_ltmMatch12.1.2

OR

f5 big-ip_ltmMatch12.1.1

OR

f5 big-ip_ltmMatch12.1.0

OR

f5 big-ip_ltmMatch11.6.5

OR

f5 big-ip_ltmMatch11.6.4

OR

f5 big-ip_ltmMatch11.6.3

OR

f5 big-ip_ltmMatch11.6.2

OR

f5 big-ip_ltmMatch11.6.1

OR

f5 big-ip_pemMatch15.1.0

OR

f5 big-ip_pemMatch15.0.1

OR

f5 big-ip_pemMatch15.0.0

OR

f5 big-ip_pemMatch14.1.2

OR

f5 big-ip_pemMatch14.1.0

OR

f5 big-ip_pemMatch13.1.3

OR

f5 big-ip_pemMatch13.1.1

OR

f5 big-ip_pemMatch13.1.0

OR

f5 big-ip_pemMatch12.1.5

OR

f5 big-ip_pemMatch12.1.4

OR

f5 big-ip_pemMatch12.1.3

OR

f5 big-ip_pemMatch12.1.2

OR

f5 big-ip_pemMatch12.1.1

OR

f5 big-ip_pemMatch12.1.0

OR

f5 big-ip_pemMatch11.6.5

OR

f5 big-ip_pemMatch11.6.4

OR

f5 big-ip_pemMatch11.6.3

OR

f5 big-ip_pemMatch11.6.2

OR

f5 big-ip_pemMatch11.6.1

OR

f5 nginx_controllerMatch3.5.0

OR

f5 nginx_controllerMatch3.4.0

OR

f5 nginx_controllerMatch3.3.0

OR

f5 nginx_controllerMatch3.2.0

OR

f5 nginx_controllerMatch3.1.0

OR

f5 nginx_controllerMatch3.0.0

OR

f5 nginx_controllerMatch2.9.0

OR

f5 nginx_controllerMatch2.9.x

OR

f5 nginx_controllerMatch2.8.1

OR

f5 nginx_controllerMatch2.8.0

OR

f5 nginx_controllerMatch2.8.x

OR

f5 nginx_controllerMatch2.7.0

OR

f5 nginx_controllerMatch2.7.x

OR

f5 nginx_controllerMatch2.6.0

OR

f5 nginx_controllerMatch2.6.x

OR

f5 nginx_controllerMatch2.5.0

OR

f5 nginx_controllerMatch2.5.x

OR

f5 nginx_controllerMatch2.4.0

OR

f5 nginx_controllerMatch2.4.x

OR

f5 nginx_controllerMatch2.3.0

OR

f5 nginx_controllerMatch2.3.x

OR

f5 nginx_controllerMatch2.2.0

OR

f5 nginx_controllerMatch2.2.x

OR

f5 nginx_controllerMatch2.1.0

OR

f5 nginx_controllerMatch2.1.x

OR

f5 nginx_controllerMatch2.0.0

OR

f5 nginx_controllerMatch2.0.x

OR

f5 nginx_controllerMatch2.x.x

OR

f5 nginx_controllerMatch1.0.1

OR

f5 nginx_controllerMatch1.0.x

OR

f5 nginx_controllerMatch1.x.x

OR

f5 big-iq_centralized_managementMatch7.1.0

OR

f5 big-iq_centralized_managementMatch7.0.0

OR

f5 big-iq_centralized_managementMatch6.1.0

OR

f5 big-iq_centralized_managementMatch6.0.1

OR

f5 big-iq_centralized_managementMatch6.0.0

OR

f5 big-iq_centralized_managementMatch5.4.0

OR

f5 big-iq_centralized_managementMatch5.3.0

OR

f5 traffix_sdcMatch5.1.0

21 Feb 2023 18:53Current

8.1High risk

Vulners AI Score8.1

CVSS 29.3

CVSS 3.19.6

EPSS0.00883

nginx controller api vulnerability cross site scripting xss system compromise