CVE-2019-6591: XSS
Published Feb 5, 2019
·Updated
On BIG-IP APM 14.0.0 to 14.0.0.4, 13.0.0 to 13.1.1.3 and 12.1.0 to 12.1.3.7, a reflected cross-site scripting (XSS) vulnerability exists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system.
Affected Software
3 affected components
F5 BIG-IP Access Policy Manager>=12.1.0<=12.1.3
F5 BIG-IP Access Policy Manager>=13.0.0<=13.1.1.3
F5 BIG-IP Access Policy Manager>=14.0.0<=14.0.0.4
Event History
Feb 5, 2019
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
DescriptionWeakness
Data Sourced
via NVD·06:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-6591?
CVE-2019-6591 has been classified as a medium severity vulnerability due to its impact on authenticated users.
2
How do I fix CVE-2019-6591?
To fix CVE-2019-6591, upgrade F5 BIG-IP Access Policy Manager to a version that is not affected by this vulnerability.
3
What products are affected by CVE-2019-6591?
CVE-2019-6591 affects F5 BIG-IP APM versions 12.1.0 to 12.1.3.7, 13.0.0 to 13.1.1.3, and 14.0.0 to 14.0.0.4.
4
What type of vulnerability is CVE-2019-6591?
CVE-2019-6591 is a reflected cross-site scripting (XSS) vulnerability.
5
Who is at risk for CVE-2019-6591?
Authenticated users of the F5 BIG-IP APM system are at risk for CVE-2019-6591.