On BIG-IP (AFM Analytics ASM) 14.1.0-14.1.0.5 14.0.0-14.0.0.4 13.0.0-13.1.1.4 12.1.0-12.1.4 and 11.5.1-11.6.3.4 A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface (TMUI) also known as the Configuration utility.