Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

f5 big-ip access policy manager 11.5.4 vulnerabilities and exploits

(subscribe to this query)
3.5
CVSSv2
CVE-2016-7467
The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider (SP) connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authenticatio...
F5 Big-ip Access Policy Manager 12.1.1F5 Big-ip Access Policy Manager 12.0.0F5 Big-ip Access Policy Manager 11.6.0F5 Big-ip Access Policy Manager 11.5.4F5 Big-ip Access Policy Manager 12.1.0F5 Big-ip Access Policy Manager 11.6.1
5
CVSSv2
CVE-2016-4545
Virtual servers in F5 BIG-IP 11.5.4, when SSL profiles are enabled, allow remote malicious users to cause a denial of service (resource consumption and Traffic Management Microkernel restart) via an SSL alert during the handshake.
F5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Advanced Firewall Manager 11.5.4F5 Big-ip Local Traffic Manager 11.5.4F5 Big-ip Analytics 11.5.4F5 Big-ip Global Traffic Manager 11.5.4F5 Big-ip Policy Enforcement Manager 11.5.4F5 Big-ip Link Controller 11.5.4F5 Big-ip Access Policy Manager 11.5.4F5 Big-ip Application Security Manager 11.5.4
4
CVSSv2
CVE-2017-0301
In F5 BIG-IP APM software versions 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 and 12.1.2 BIG-IP APM portal access requests do not return the intended resources in some cases. This may allow access to internal BIG-IP APM resources, however the a...
F5 Big-ip Access Policy Manager 11.5.1F5 Big-ip Access Policy Manager 11.5.2F5 Big-ip Access Policy Manager 11.5.3F5 Big-ip Access Policy Manager 11.5.4F5 Big-ip Access Policy Manager 12.1.1F5 Big-ip Access Policy Manager 12.1.2F5 Big-ip Access Policy Manager 11.6.1F5 Big-ip Access Policy Manager 12.1.0F5 Big-ip Access Policy Manager 11.5.0F5 Big-ip Access Policy Manager 11.6.0F5 Big-ip Access Policy Manager 12.0.0
4
CVSSv2
CVE-2016-3687
Open redirect vulnerability in F5 BIG-IP APM 11.2.1, 11.4.x, 11.5.x, and 11.6.x prior to 11.6.0 HF6 and Edge Gateway 11.2.1, when using multi-domain single sign-on (SSO), allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a bas...
F5 Big-ip Access Policy Manager 11.5.4F5 Big-ip Access Policy Manager 11.5.3F5 Big-ip Access Policy Manager 11.5.2F5 Big-ip Access Policy Manager 11.5.1F5 Big-ip Access Policy Manager 11.6.0F5 Big-ip Access Policy Manager 11.5.0F5 Big-ip Access Policy Manager 11.4.0F5 Big-ip Access Policy Manager 11.4.1F5 Big-ip Access Policy Manager 11.2.1F5 Big-ip Edge Gateway 11.2.1
5
CVSSv2
CVE-2018-5510
On F5 BIG-IP 11.5.4 HF4-11.5.5, the Traffic Management Microkernel (TMM) may restart when processing a specific sequence of packets on IPv6 virtual servers.
F5 Big-ip Local Traffic Manager 11.5.4F5 Big-ip Local Traffic Manager 11.5.5F5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Application Acceleration Manager 11.5.5F5 Big-ip Advanced Firewall Manager 11.5.4F5 Big-ip Advanced Firewall Manager 11.5.5F5 Big-ip Analytics 11.5.4F5 Big-ip Analytics 11.5.5F5 Big-ip Access Policy Manager 11.5.4F5 Big-ip Access Policy Manager 11.5.5F5 Big-ip Application Security Manager 11.5.4F5 Big-ip Application Security Manager 11.5.5F5 Big-ip Edge Gateway 11.5.4F5 Big-ip Edge Gateway 11.5.5F5 Big-ip Global Traffic Manager 11.5.4F5 Big-ip Global Traffic Manager 11.5.5F5 Big-ip Link Controller 11.5.5F5 Big-ip Link Controller 11.5.4F5 Big-ip Policy Enforcement Manager 11.5.4F5 Big-ip Policy Enforcement Manager 11.5.5F5 Big-ip Webaccelerator 11.5.4F5 Big-ip Webaccelerator 11.5.5
4.3
CVSSv2
CVE-2016-3686
The Single Sign-On (SSO) feature in F5 BIG-IP APM 11.x prior to 11.6.0 HF6 and BIG-IP Edge Gateway 11.0.0 up to and including 11.3.0 might allow remote malicious users to obtain sensitive SessionId information by leveraging access to the Location HTTP header in a redirect.
F5 Big-ip Edge Gateway 11.3.0F5 Big-ip Edge Gateway 11.2.1F5 Big-ip Edge Gateway 11.2.0F5 Big-ip Edge Gateway 11.1.0F5 Big-ip Edge Gateway 11.0.0F5 Big-ip Access Policy Manager 11.5.4F5 Big-ip Access Policy Manager 11.5.3F5 Big-ip Access Policy Manager 11.4.0F5 Big-ip Access Policy Manager 11.2.1F5 Big-ip Access Policy Manager 11.6.0F5 Big-ip Access Policy Manager 11.3.0F5 Big-ip Access Policy Manager 11.2.0F5 Big-ip Access Policy Manager 11.1.0F5 Big-ip Access Policy Manager 11.0.0F5 Big-ip Access Policy Manager 11.5.2F5 Big-ip Access Policy Manager 11.5.1F5 Big-ip Access Policy Manager 11.5.0F5 Big-ip Access Policy Manager 11.4.1
5
CVSSv2
CVE-2016-5023
Virtual servers in F5 BIG-IP systems 11.2.1 HF11 through HF15, 11.4.1 HF4 through HF10, 11.5.3 up to and including 11.5.4, 11.6.0 HF5 through HF7, and 12.0.0, when configured with a TCP profile, allow remote malicious users to cause a denial of service (Traffic Management Microke...
F5 Big-ip Edge Gateway 11.2.1F5 Big-ip Protocol Security Module 11.2.1F5 Big-ip Protocol Security Module 11.4.1F5 Big-ip Analytics 11.5.3F5 Big-ip Analytics 11.4.1F5 Big-ip Analytics 11.2.1F5 Big-ip Analytics 12.0.0F5 Big-ip Analytics 11.5.4F5 Big-ip Analytics 11.6.0F5 Big-ip Application Security Manager 12.0.0F5 Big-ip Application Security Manager 11.2.1F5 Big-ip Application Security Manager 11.5.4F5 Big-ip Application Security Manager 11.4.1F5 Big-ip Application Security Manager 11.6.0F5 Big-ip Application Security Manager 11.5.3F5 Big-ip Advanced Firewall Manager 12.0.0F5 Big-ip Advanced Firewall Manager 11.6.0F5 Big-ip Advanced Firewall Manager 11.5.3F5 Big-ip Advanced Firewall Manager 11.4.1F5 Big-ip Advanced Firewall Manager 11.5.4F5 Big-ip Domain Name System 12.0.0F5 Big-ip Policy Enforcement Manager 12.0.0
4.3
CVSSv2
CVE-2016-7468
An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic. This vulnerability affects virtual servers associated with TCP profiles when the BIG-IP system's tm.tcpprogressive db variable va...
F5 Big-ip Local Traffic Manager 11.5.0F5 Big-ip Local Traffic Manager 11.5.1F5 Big-ip Local Traffic Manager 11.5.2F5 Big-ip Local Traffic Manager 11.5.4F5 Big-ip Local Traffic Manager 11.4.0F5 Big-ip Local Traffic Manager 11.4.1F5 Big-ip Local Traffic Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.5.0F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.4.0F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Advanced Firewall Manager 11.5.0F5 Big-ip Advanced Firewall Manager 11.5.1F5 Big-ip Advanced Firewall Manager 11.5.2F5 Big-ip Advanced Firewall Manager 11.5.3F5 Big-ip Advanced Firewall Manager 11.4.0F5 Big-ip Advanced Firewall Manager 11.4.1F5 Big-ip Advanced Firewall Manager 11.5.4F5 Big-ip Analytics 11.5.0
5
CVSSv2
CVE-2017-6132
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 and 11.5.0 - 11.5.4, an undisclosed sequence of packets sent to BIG-IP High Availability state mirror listeners (primary and/or ...
F5 Big-ip Local Traffic Manager 11.5.4F5 Big-ip Local Traffic Manager 13.0.0F5 Big-ip Local Traffic Manager 11.5.0F5 Big-ip Local Traffic Manager 11.5.1F5 Big-ip Local Traffic Manager 11.5.2F5 Big-ip Local Traffic Manager 11.5.3F5 Big-ip Local Traffic ManagerF5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Application Acceleration Manager 13.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 11.5.0F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.5.3F5 Big-ip Advanced Firewall Manager 11.5.4F5 Big-ip Advanced Firewall Manager 13.0.0F5 Big-ip Advanced Firewall Manager 11.5.0F5 Big-ip Advanced Firewall Manager 11.5.1F5 Big-ip Advanced Firewall Manager 11.5.2F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 11.5.3F5 Big-ip Analytics 11.5.2
9.3
CVSSv2
CVE-2016-5700
Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2, when configured with the HTTP Explicit Proxy functionality or SOCKS profile, allow remote malicious ...
F5 Big-ip Policy Enforcement Manager 11.6.0F5 Big-ip Policy Enforcement Manager 12.0.0F5 Big-ip Policy Enforcement Manager 12.1.0F5 Big-ip Policy Enforcement Manager 11.6.1F5 Big-ip Policy Enforcement Manager 11.5.2F5 Big-ip Policy Enforcement Manager 11.5.3F5 Big-ip Policy Enforcement Manager 11.5.4F5 Big-ip Policy Enforcement Manager 11.5.0F5 Big-ip Policy Enforcement Manager 11.5.1F5 Big-ip Local Traffic Manager 11.5.3F5 Big-ip Local Traffic Manager 11.5.4F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Local Traffic Manager 11.5.1F5 Big-ip Local Traffic Manager 11.5.2F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Local Traffic Manager 11.5.0F5 Big-ip Websafe 11.6.0F5 Big-ip Websafe 12.0.0F5 Big-ip Websafe 12.1.0F5 Big-ip Websafe 11.6.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook