CVE-2020-5889

On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, in BIG-IP APM portal access, a specially crafted HTTP request can lead to reflected XSS…

published April 30, 2020

CVSS
—
EPSS
1%
Percentile
53.4
In the wild
Unconfirmed
What it is

On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, in BIG-IP APM portal access, a specially crafted HTTP request can lead to reflected XSS after the BIG-IP APM system rewrites the HTTP response from the untrusted backend server and sends it to the client.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00720 · 53.4th percentile
Published
2020-04-30T20:58Z
EPSS history
Timeline
  • 30 APR 20:58Z
    On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, in BIG-IP APM portal access, a specially crafted HTTP request can lead to reflected XSS…
    cvelistv5