CVE-2020-5905 PUBLISHED CVSS 4.300000190734863 MEDIUM

In version 11.6.1-11.6.5.2 of the BIG-IP system Configuration utility Network > WCCP page, the system does not sanitize all user-provided data before display.

EPSS 0.26% · 48.7th percentile

Risk Scores

CVSS v3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
EPSS Score
0.26%
48.7th percentile

Affected Products

VendorProductVersions
f5big-ip_local_traffic_manager11.6.1
f5big-ip_domain_name_system11.6.1
f5big-ip_link_controller11.6.1
f5big-ip_analytics11.6.1
f5big-ip_access_policy_manager11.6.1
f5big-ip_application_security_manager11.6.1
n/aBIG-IP11.6.1-11.6.5.2
f5big-ip_application_acceleration_manager11.6.1
f5big-ip_fraud_protection_service11.6.1
f5big-ip_policy_enforcement_manager11.6.1
f5big-ip_global_traffic_manager11.6.1
f5big-ip_advanced_firewall_manager11.6.1

Timeline

References

Open in Interactive Console →