Skip to content
fr Sign in
Not rated

CVE-2020-5853 In BIG-IP APM portal access on versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and…

Description

In BIG-IP APM portal access on versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, when backend servers serve HTTP pages with special JavaScript code, this can lead to internal portal access name conflict.

Affected products and versions

Product Affected versions Fixed in
BIG-IP APM 15.0.0-15.1.0 No fix stated
BIG-IP APM 14.0.0-14.1.2.3 No fix stated
BIG-IP APM 13.1.0-13.1.3.2 No fix stated
BIG-IP APM 12.1.0-12.1.5 No fix stated
BIG-IP APM 11.5.2-11.6.5.1 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of BIG-IP APM

The 12 CVEs of BIG-IP APM →
CVE-2022-35245 In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5.1, when a BIG-IP APM… 7.5 High CVE-2022-33203 In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when a BIG-IP APM access… 7.5 High CVE-2022-31473 In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated… 6.8 Medium CVE-2022-29263 On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to… 7.8 High
Track this CVE