CVE-2020-5927

published 2020-08-26

CVE-2020-5927: In versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, BIG-IP ASM Configuration utility Stored-Cross Site Scripting.

medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

In versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, BIG-IP ASM Configuration utility Stored-Cross Site Scripting.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
f5	big-ip_application_security_manager	>= 14.1.0 < 14.1.2.7	14.1.2.7
f5	big-ip_application_security_manager	>= 15.0.0 < 15.0.1.4	15.0.1.4
f5	big-ip_application_security_manager	>= 15.1.0 < 15.1.0.5	15.1.0.5
f5	big-ip_asm	—	—

CWE-79