BugZero | F5 BugID 706797 - Portal Access: some multibyte characters in JavaSc...

F5 - Defect ID: 706797

Portal Access: some multibyte characters in JavaScript code may not be handled correctly

F5 - Defect ID: 706797

Portal Access: some multibyte characters in JavaScript code may not be handled correctly

Last updated on December 31st, 2025

BugZero Risk Score
6.7 Medium

Overall: 6.7

Severity: 7.3

Community: 4.2

Lifecycle: 7.0

What is the BugZero Risk Score?

F5 Integration

Learn more about where this data comes from

F5 Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Bug Details

Priority: 3-Major
Status: Verified
Impact Category: Access Policy Manager

Description

Symptoms

If JavaScript code contains multi-byte character which contains 0x0A in the last byte after conversion to UTF-32 form, then this character is handled as NEW LINE by Portal Access server-side JavaScript parser. If NEW LINE is not valid in this place, JavaScript code cannot be parsed.

Impact

Web application may not work correctly.

Conditions

JavaScript code with multi-byte character which contains 0x0A in the last byte after conversion to UTF-32 form, for example: //? aa bb (?) gives (4E 0A) in UTF32 form. So this line is processed as the following TWO lines: // aa bb The second line is not a valid JavaScript code.

Workaround

There is no workaround at this time.

Fix Information

Now Portal Access JavaScript parser handles multi-byte characters correctly.

Change history

2025-04-28 Added: 13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1

Links

Original Vendor Announcement

Relevant Products

Click on a version to see all relevant bugs

Affected versions:13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1

Fixed versions: 14.1.0

Relevant Products

Click on a version to see all relevant bugs

Fixed versions: 14.1.0

Top F5 Defects

9.6Defect ID: 2141205
Tpm-status returns: "System Integrity: Invalid" for some Engineering Hotfixes
9.6Defect ID: 546260
TMM can crash if using the v6rd profile
9.6Defect ID: 1496269
VCMP guest on version 16.1.4 or above might experience constant TMM crashes.
9.6Defect ID: 740969
Menu visibility issue with newly activated license.
9.4Defect ID: 1785385
Intermittent traffic failures when tenant is running BIG-IP v17.1.2 or above and host is on version prior to F5OS-A 1.8.0 or F5OS-C 1.8.0

Ready to prevent the next vendor outage?

Get a demo

F5 - Defect ID: 706797

Portal Access: some multibyte characters in JavaScript code may not be handled correctly

F5 - Defect ID: 706797

Portal Access: some multibyte characters in JavaScript code may not be handled correctly

Last updated on December 31st, 2025

BugZero Risk Score6.7 Medium

Bug Details

Symptoms

Impact

Conditions

Workaround

Fix Information

Links

Top F5 Defects

Ready to prevent the next vendor outage?

BugZero Risk Score
6.7 Medium