CVE-2020-5853 - In BIG-IP APM portal access on versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, when backend servers serve HTTP pages with special JavaScript code, this can lead to internal portal access name conflict

Back Back to CVE browser

MEDIUM

In BIG-IP APM portal access on versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, when backend servers serve HTTP pages with special JavaScript code, this can lead to internal portal access name conflict

Published Jan 14, 2020

5.4

MEDIUM

CVSS 3.1

EPSS 0.52%

Description

In BIG-IP APM portal access on versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, when backend servers serve HTTP pages with special JavaScript code, this can lead to internal portal access name conflict.

Affected products

Vendor F5 Product Big-IP Apm Default
n/a
- Version
  11.5.2-11.6.5.1
  Status
  affected
  Constraints
  -
- Version
  12.1.0-12.1.5
  Status
  affected
  Constraints
  -
- Version
  13.1.0-13.1.3.2
  Status
  affected
  Constraints
  -
- Version
  14.0.0-14.1.2.3
  Status
  affected
  Constraints
  -
- Version
  15.0.0-15.1.0
  Status
  affected
  Constraints
  -