K46401178: BIG-IP Configuration utility vulnerability CVE-2019-6599

Security Advisory Description Improper escaping of values in an undisclosed page of the BIG-IP Configuration utility may result in an improper handling on the JSON response when it is injected by a malicious script through a remote cross-site scripting XSS attack. CVE-2019-6599 Impact BIG-IP and...

CVE-2019-6599

In BIG-IP 11.6.1-11.6.3.2 or 11.5.1-11.5.8, or Enterprise Manager 3.1.1, improper escaping of values in an undisclosed page of the configuration utility may result with an improper handling on the JSON response when it is injected by a malicious script via a remote cross-site scripting XSS attack...

CVE-2019-6599

The CVE-2019-6599 issue affects BIG-IP Configuration utility (and related Enterprise Manager) with improper escaping in an undisclosed page, causing JSON handling problems when injected by a remote XSS script. Affected products/versions: BIG-IP 11.6.1–11.6.3.2 and 11.5.1–11.5.8; Enterprise Manage...

F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K46401178)

Improper escaping of values in an undisclosed page of the BIG-IP Configuration utilitymay result in an improper handling on the JSON response when it is injected by a malicious script through a remotecross-site scripting XSS attack. CVE-2019-6599 Impact BIG-IP andEnterprise Manager This...