CVE-2019-6626

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.1 through 11.6.3.4 F5 BIG-IP versions 12.1.0 through 12.1.4 F5 BIG-IP versions 13.0.0 through 13.1.1.4 F5 BIG-IP versions 14.0.0 through 14.0.0.4 F5 BIG-IP versions 14.1.0 through 14.1.0.5

Description A reflected cross-site scripting (XSS) issue exists in an undisclosed page of the BIG-IP Traffic Management User Interface (TMUI), also known as the Configuration utility. This affects the BIG-IP (AFM, Analytics, ASM) products.

Recommendations For versions 11.5.1 through 11.6.3.4, update to a version outside of this range to resolve the issue. For versions 12.1.0 through 12.1.4, update to a version outside of this range to resolve the issue. For versions 13.0.0 through 13.1.1.4, update to a version outside of this range to resolve the issue. For versions 14.0.0 through 14.0.0.4, update to a version outside of this range to resolve the issue. For versions 14.1.0 through 14.1.0.5, update to a version outside of this range to resolve the issue.