{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-21T13:40:45.937","vulnerabilities":[{"cve":{"id":"CVE-2019-6665","sourceIdentifier":"f5sirt@f5.com","published":"2019-11-27T22:15:11.383","lastModified":"2026-06-17T02:39:27.803","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"On BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, an attacker with access to the device communication between the BIG-IP ASM Central Policy Builder and the BIG-IQ/Enterprise Manager/F5 iWorkflow will be able to set up the proxy the same way and intercept the traffic."},{"lang":"es","value":"En BIG-IP ASM versiones 15.0.0 hasta 15.0.1, 14.1.0 hasta 14.1.2, 14.0.0 hasta 14.0.1 y 13.1.0 hasta 13.1.3.1, BIG-IQ versiones 6.0.0 y 5.2.0 hasta 5.4.0, iWorkflow versión 2.3.0 y Enterprise Manager versión 3.1.1, un atacante con acceso a la comunicación del dispositivo entre BIG-IP ASM Central Policy Builder y BIG-IQ/Enterprise Manager/F5 iWorkflow podrá configurar el proxy de la misma manera e interceptar el tráfico."}],"affected":[{"source":"f5sirt@f5.com","affectedData":[{"vendor":"F5","product":"BIG-IP ASM","versions":[{"version":"15.0.0-15.0.1","status":"affected"},{"version":"14.1.0-14.1.2","status":"affected"},{"version":"14.0.0-14.0.1","status":"affected"},{"version":"13.1.0-13.1.3.1","status":"affected"}]},{"vendor":"F5","product":"BIG-IQ","versions":[{"version":"6.0.0","status":"affected"},{"version":"5.2.0-5.4.0","status":"affected"}]},{"vendor":"F5","product":"IWorkflow","versions":[{"version":"2.3.0","status":"affected"}]},{"vendor":"F5","product":"Enterprise Manager","versions":[{"version":"3.1.1","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L","baseScore":9.4,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":5.5}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"13.1.0","versionEndIncluding":"13.1.3.1","matchCriteriaId":"241F94B5-C01C-4F62-85D9-EAC3C71845BC"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"14.0.0","versionEndIncluding":"14.0.1","matchCriteriaId":"31A36F31-1453-4907-8621-61E75F285734"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"14.1.0","versionEndIncluding":"14.1.2","matchCriteriaId":"05106312-E60D-4CF1-B4C8-6F1EF5AF8D75"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"15.0.0","versionEndIncluding":"15.0.1","matchCriteriaId":"70099A38-3B84-4C40-8590-BE6C8F7C21A7"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*","versionStartIncluding":"5.2.0","versionEndIncluding":"5.4.0","matchCriteriaId":"14A4E46D-F0DB-4201-9102-EC89FACBE780"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:big-iq_centralized_management:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"ADA44C24-A2C7-484A-A548-B785A11CF9D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D5F5FEE7-059A-4A9B-BCCD-18F0AA435040"},{"vulnerable":true,"criteria":"cpe:2.3:a:f5:iworkflow:2.3.0:*:*:*:*:*:*:*","matchCriteriaId":"D3CE7526-9630-48EF-81FB-44904AF0653F"}]}]}],"references":[{"url":"https://support.f5.com/csp/article/K26462555","source":"f5sirt@f5.com","tags":["Vendor Advisory"]},{"url":"https://support.f5.com/csp/article/K26462555","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}