Lucene search
F5CVELIST:CVE-2019-6639HistoryJul 03, 2019 - 6:26 p.m.
CVE-2019-6639
2019-07-0318:26:41
f5
www.cve.org
1
0.001 Low
EPSS
Percentile
22.1%
On BIG-IP (AFM, PEM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.1-11.5.8, an undisclosed TMUI pages for AFM and PEM Subscriber management are vulnerable to a stored cross-site scripting (XSS) issue. This is a control plane issue only and is not accessible from the data plane. The attack requires a malicious resource administrator to store the XSS.
CNA Affected
[
{
"product": "BIG-IP (AFM, PEM)",
"vendor": "F5",
"versions": [
{
"status": "affected",
"version": "BIG-IP (AFM"
},
{
"status": "affected",
"version": "PEM) 14.1.0-14.1.0.5"
},
{
"status": "affected",
"version": "14.0.0-14.0.0.4"
},
{
"status": "affected",
"version": "13.0.0-13.1.1.4"
},
{
"status": "affected",
"version": "12.1.0-12.1.4"
},
{
"status": "affected",
"version": "11.6.1-11.6.3.4"
},
{
"status": "affected",
"version": "11.5.1-11.5.8"
}
]
}
]Related
nessus
nessus
F5 Networks BIG-IP : BIG-IP AFM and PEM TMUI XSS vulnerability (K61002104)
2019-07-02 00:00:00
f5
f5
K61002104 : BIG-IP AFM and PEM TMUI XSS vulnerability CVE-2019-6639
2019-07-01 00:00:00
nvd
nvd
CVE-2019-6639
2019-07-03 19:15:13
cve
cve
CVE-2019-6639
2019-07-03 19:15:13
prion
prion
Cross site scripting
2019-07-03 19:15:00