Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

application security manager appliance vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2012-2975
Cross-site scripting (XSS) vulnerability in the traffic overview page on the F5 ASM appliance 10.0.0 up to and including 11.2.0 HF2 allows remote malicious users to inject arbitrary web script or HTML via crafted requests that are later listed on a summary page.
F5 Application Security Manager Appliance 11.2.0F5 Application Security Manager Appliance 10.0.0
6
CVSSv2
CVE-2022-27806
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions before 9.0, when running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to...
F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Application Security Manager 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Web Application Firewall 15.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Advanced Web Application Firewall 14.1.4F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Access Policy Manager 13.1.1F5 Big-ip Access Policy Manager 13.1.3F5 Big-ip Access Policy Manager 13.1.4F5 Big-ip Access Policy Manager 13.1.5F5 Big-ip Access Policy Manager 14.1.2F5 Big-ip Access Policy Manager 14.1.3F5 Big-ip Access Policy Manager 15.1.1F5 Big-ip Access Policy Manager 15.1.2F5 Big-ip Access Policy Manager 15.1.3F5 Big-ip Access Policy Manager 15.1.4F5 Big-ip Access Policy Manager 15.1.5F5 Big-ip Access Policy Manager 16.1.0
4.9
CVSSv2
CVE-2022-25946
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions before 9.0, when running in Appliance mode, an authenticated attacker with Administrator role privilege may be able ...
F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Application Security Manager 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Web Application Firewall 15.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Advanced Web Application Firewall 14.1.4F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Access Policy Manager 13.1.1F5 Big-ip Access Policy Manager 13.1.3F5 Big-ip Access Policy Manager 13.1.4F5 Big-ip Access Policy Manager 13.1.5F5 Big-ip Access Policy Manager 14.1.2F5 Big-ip Access Policy Manager 14.1.3F5 Big-ip Access Policy Manager 15.1.1F5 Big-ip Access Policy Manager 15.1.2F5 Big-ip Access Policy Manager 15.1.3F5 Big-ip Access Policy Manager 15.1.4F5 Big-ip Access Policy Manager 15.1.5F5 Big-ip Access Policy Manager 16.1.0
4.9
CVSSv2
CVE-2016-3040
IBM WebSphere Application Server (WAS) Liberty, as used in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x prior to 2.0.2 FP8, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Ibm Security Privileged Identity Manager Virtual Appliance 2.0
7.8
CVSSv2
CVE-2015-6360
The encryption-processing feature in Cisco libSRTP prior to 1.5.3 allows remote malicious users to cause a denial of service via crafted fields in SRTP packets, aka Bug ID CSCux00686.
Cisco Ios Xe 3.10s 3.10.2tsCisco Ios Xe 3.14s 3.14.0sCisco Ios Xe 3.10s 3.10.2sCisco Ios Xe 3.15s 3.15.2sCisco Ios Xe 3.15s 3.15.1sCisco Ios Xe 3.10s 3.10.1xbsCisco Ios Xe 3.10s 3.10.1sCisco Ios Xe 3.10s 3.10.0sCisco Ios Xe 3.10s 3.10.6sCisco Ios Xe 3.11s 3.11.3sCisco Ios Xe 3.11s 3.11.2sCisco Ios Xe 3.13s 3.13.4sCisco Ios Xe 3.11s 3.11.1sCisco Ios Xe 3.11s 3.11.4sCisco Ios Xe 3.10s 3.10.5sCisco Ios Xe 3.10s 3.10.7sCisco Ios Xe 3.13s 3.13.1sCisco Ios Xe 3.13s 3.13.0sCisco Ios Xe 3.10s 3.10.4sCisco Ios Xe 3.11s 3.11.0sCisco Webex Meeting Center BaseCisco Unified Ip Phone 8900 Series Firmware 9.0\\(3\\)
6
CVSSv2
CVE-2022-26415
On F5 BIG-IP 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, 14.1.x versions before 14.1.4.6, 13.1.x versions before 13.1.5, and all versions of 12.1.x, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass A...
F5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip AnalyticsF5 Big-ip Domain Name SystemF5 Big-ip Application Acceleration ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Global Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Local Traffic ManagerF5 Big-ip Policy Enforcement ManagerF5 Big-ip Application Security Manager
NA
CVE-2022-35243
In BIG-IP Versions 16.1.x prior to 16.1.3, 15.1.x prior to 15.1.5.1, 14.1.x prior to 14.1.5, and all versions of 13.1.x, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, using an undisclosed i...
F5 Big-ip AnalyticsF5 Big-ip Link ControllerF5 Big-ip Local Traffic ManagerF5 Big-ip Policy Enforcement ManagerF5 Big-ip Global Traffic ManagerF5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Application Security ManagerF5 Big-ip Domain Name SystemF5 Big-ip Fraud Protection Service
NA
CVE-2022-41800
In all versions of BIG-IP, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing an undisclosed iControl REST endpoint. A successful exploit can allow the malicious user to cross a secur...
F5 Big-ip Access Policy Manager 17.0.0F5 Big-ip Analytics 17.0.0F5 Big-ip Application Security Manager 17.0.0F5 Big-ip Application Acceleration Manager 17.0.0F5 Big-ip Policy Enforcement Manager 17.0.0F5 Big-ip Local Traffic Manager 17.0.0F5 Big-ip Link Controller 17.0.0F5 Big-ip Global Traffic Manager 17.0.0F5 Big-ip Fraud Protection Service 17.0.0F5 Big-ip Domain Name System 17.0.0F5 Big-ip AnalyticsF5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Global Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Domain Name SystemF5 Big-ip Application Security ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall Manager
6.5
CVSSv2
CVE-2021-23015
On BIG-IP 15.1.x prior to 15.1.3, 14.1.x prior to 14.1.4.2, 13.1.0.8 up to and including 13.1.3.6, and all versions of 16.0.x, when running in Appliance Mode, an authenticated user assigned the 'Administrator' role may be able to bypass Appliance Mode restrictions utili...
F5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Web Application FirewallF5 Big-ip Application Acceleration ManagerF5 Big-ip AnalyticsF5 Big-ip Application Security ManagerF5 Big-ip Domain Name SystemF5 Big-ip Fraud Protection ServiceF5 Big-ip Ddos Hybrid DefenderF5 Big-ip Global Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Local Traffic ManagerF5 Big-ip Policy Enforcement ManagerF5 Big-ip Ssl Orchestrator
3.6
CVSSv2
CVE-2019-6633
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, and 11.5.1-11.6.4, when the BIG-IP system is licensed with Appliance mode, user accounts with Administrator and Resource Administrator roles can bypass Appliance mode restrictions.
F5 Big-ip Local Traffic ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip AnalyticsF5 Big-ip Access Policy ManagerF5 Big-ip Application Security ManagerF5 Big-ip Domain Name SystemF5 Big-ip Edge GatewayF5 Big-ip Global Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Policy Enforcement ManagerF5 Big-ip WebacceleratorF5 Big-ip Websafe
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-38028CVE-2024-32406CVE-2024-25624IMAPCVE-2024-2310CVE-2024-0874CVE-2024-20359XXEremote code execution
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook