CVE-2019-6595: XSS
Published Feb 26, 2019
·Updated
Cross-site scripting (XSS) vulnerability in F5 BIG-IP Access Policy Manager (APM) 11.5.x and 11.6.x Admin Web UI.
Affected Software
1 affected component
F5 BIG-IP Access Policy Manager>=11.5.1<=11.6.3
Event History
Feb 26, 2019
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionWeakness
Data Sourced
via NVD·03:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-6595?
CVE-2019-6595 is rated as a medium severity vulnerability.
2
How can I fix CVE-2019-6595?
To address CVE-2019-6595, upgrade to F5 BIG-IP Access Policy Manager version 11.6.4 or later.
3
What does CVE-2019-6595 exploit?
CVE-2019-6595 exploits a cross-site scripting (XSS) vulnerability in the Admin Web UI.
4
Which versions of F5 BIG-IP Access Policy Manager are affected by CVE-2019-6595?
F5 BIG-IP Access Policy Manager versions 11.5.x up to 11.6.3 are affected by CVE-2019-6595.
5
Is there a workaround for CVE-2019-6595?
There is no official workaround for CVE-2019-6595; upgrading to a fixed version is recommended.