CVE-2020-5889

Name of the Vulnerable Software and Affected Versions BIG-IP versions 14.1.0 through 14.1.2.3 BIG-IP versions 15.0.0 through 15.0.1.2 BIG-IP versions 15.1.0 through 15.1.0.1

Description A specially crafted HTTP request can lead to reflected XSS after the BIG-IP APM system rewrites the HTTP response from the untrusted backend server and sends it to the client. This occurs in the BIG-IP APM portal access.

Recommendations For versions 14.1.0 through 14.1.2.3, update to a version that includes a fix for this issue. For versions 15.0.0 through 15.0.1.2, update to a version that includes a fix for this issue. For versions 15.1.0 through 15.1.0.1, update to a version that includes a fix for this issue.