K32840424: BIG-IP APM XSS vulnerability CVE-2019-6591

Security Advisory Description A reflected cross-site scripting XSS vulnerability exists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system. CVE-2019-6591 Impact An authenticated attacker may be able to inject malicious content...

CVE-2019-6591

Summary: CVE-2019-6591 is a reflected XSS in BIG-IP APM’s resource information page when a full webtop is configured. The issue affects BIG-IP APM versions: 14.0.0–14.0.0.4, 13.0.0–13.1.1.3, and 12.1.0–12.1.3.7. Exploitation is limited to an authenticated user context. The F5 advisory lists fixes...

F5 Networks BIG-IP : BIG-IP APM XSS vulnerability (K32840424)

A reflected cross-site scripting XSS vulnerabilityexists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system. CVE-2019-6591 Impact An authenticated attacker may be able to inject malicious content. C Tenable Network Security, Inc. The...