CVE-2020-5932

On BIG-IP ASM 15.1.0-15.1.0.5, a cross-site scripting (XSS) vulnerability exists in the BIG-IP ASM Configuration utility response and blocking pages

published October 29, 2020

CVSS
—
EPSS
1%
Percentile
43.1
In the wild
Unconfirmed
What it is

On BIG-IP ASM 15.1.0-15.1.0.5, a cross-site scripting (XSS) vulnerability exists in the BIG-IP ASM Configuration utility response and blocking pages. An authenticated user with administrative privileges can specify a response page with any content, including JavaScript code that will be executed when preview is opened.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00517 · 43.1th percentile
Published
2020-10-29T15:14Z
EPSS history
Timeline
  • 29 OCT 15:14Z
    On BIG-IP ASM 15.1.0-15.1.0.5, a cross-site scripting (XSS) vulnerability exists in the BIG-IP ASM Configuration utility response and blocking pages
    cvelistv5