Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

f5 big-ip advanced firewall manager 14.1.0 vulnerabilities and exploits

(subscribe to this query)
578
VMScore
CVE-2022-28695
On F5 BIG-IP AFM 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, 14.1.x versions before 14.1.4.6, and 13.1.x versions before 13.1.5, an authenticated attacker with high privileges can upload a maliciously crafted file to the BIG-IP AFM Configuration utility, whi...
F5 Big-ip Advanced Firewall Manager 13.1.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Advanced Firewall Manager 15.1.0F5 Big-ip Advanced Firewall Manager 14.1.4F5 Big-ip Advanced Firewall Manager 16.1.0F5 Big-ip Advanced Firewall Manager 17.0.0F5 Big-ip Advanced Firewall Manager 16.1.2F5 Big-ip Advanced Firewall Manager 16.1.1F5 Big-ip Advanced Firewall Manager 15.1.5F5 Big-ip Advanced Firewall Manager 15.1.4F5 Big-ip Advanced Firewall Manager 15.1.3F5 Big-ip Advanced Firewall Manager 15.1.2F5 Big-ip Advanced Firewall Manager 15.1.1F5 Big-ip Advanced Firewall Manager 14.1.3F5 Big-ip Advanced Firewall Manager 14.1.2F5 Big-ip Advanced Firewall Manager 13.1.5F5 Big-ip Advanced Firewall Manager 13.1.4F5 Big-ip Advanced Firewall Manager 13.1.3F5 Big-ip Advanced Firewall Manager 13.1.1
605
VMScore
CVE-2019-6644
Similar to the issue identified in CVE-2018-12120, on versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, and 12.1.0-12.1.4 BIG-IP will bind a debug nodejs process to all interfaces when invoked. This may expose the process to unauthorized users if the plugin is left in deb...
F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 14.1.0F5 Big-ip Local Traffic Manager 14.0.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 14.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 14.0.0F5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Analytics 14.0.0F5 Big-ip AnalyticsF5 Big-ip Analytics 14.1.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 14.0.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 14.1.0F5 Big-ip Application Security Manager 14.0.0F5 Big-ip Edge Gateway 14.1.0F5 Big-ip Edge GatewayF5 Big-ip Edge Gateway 14.0.0F5 Big-ip Fraud Protection Service
383
VMScore
CVE-2019-6647
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, when processing authentication attempts for control-plane users MCPD leaks a small amount of memory. Under rare conditions attackers with access to the management interface could eventually...
F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 14.0.0F5 Big-ip Local Traffic Manager 14.1.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 14.0.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Application Acceleration Manager 14.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Analytics 14.1.0F5 Big-ip AnalyticsF5 Big-ip Analytics 14.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 14.0.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 14.0.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Edge Gateway 14.1.0F5 Big-ip Edge GatewayF5 Big-ip Edge Gateway 14.0.0F5 Big-ip Fraud Protection Service
445
VMScore
CVE-2019-6643
On versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, and 11.5.2-11.6.4, an attacker sending specifically crafted DHCPv6 requests through a BIG-IP virtual server configured with a DHCPv6 profile may be able to cause the TMM process to produce a core file.
F5 Big-ip Local Traffic Manager 14.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 14.1.0F5 Big-ip Advanced Firewall Manager 14.0.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Application Acceleration Manager 14.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Analytics 14.0.0F5 Big-ip AnalyticsF5 Big-ip Analytics 14.1.0F5 Big-ip Access Policy Manager 14.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Application Security Manager 14.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 14.1.0F5 Big-ip Edge Gateway 14.0.0F5 Big-ip Edge GatewayF5 Big-ip Edge Gateway 14.1.0F5 Big-ip Fraud Protection Service 14.0.0
445
VMScore
CVE-2019-6645
On BIG-IP 14.0.0-14.1.0.5, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, FTP traffic passing through a Virtual Server with both an active FTP profile associated and connection mirroring configured may lead to a TMM crash causing the configured HA action to be taken.
F5 Big-ip Local Traffic Manager 14.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 14.1.0F5 Big-ip Advanced Firewall Manager 14.0.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Application Acceleration Manager 14.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Analytics 14.0.0F5 Big-ip AnalyticsF5 Big-ip Analytics 14.1.0F5 Big-ip Access Policy Manager 14.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Application Security Manager 14.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 14.1.0F5 Big-ip Edge Gateway 14.0.0F5 Big-ip Edge GatewayF5 Big-ip Edge Gateway 14.1.0F5 Big-ip Fraud Protection Service 14.0.0
534
VMScore
CVE-2022-27806
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions before 9.0, when running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to...
F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Application Security Manager 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Web Application Firewall 15.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Advanced Web Application Firewall 14.1.4F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Access Policy Manager 13.1.1F5 Big-ip Access Policy Manager 13.1.3F5 Big-ip Access Policy Manager 13.1.4F5 Big-ip Access Policy Manager 13.1.5F5 Big-ip Access Policy Manager 14.1.2F5 Big-ip Access Policy Manager 14.1.3F5 Big-ip Access Policy Manager 15.1.1F5 Big-ip Access Policy Manager 15.1.2F5 Big-ip Access Policy Manager 15.1.3F5 Big-ip Access Policy Manager 15.1.4F5 Big-ip Access Policy Manager 15.1.5F5 Big-ip Access Policy Manager 16.1.0
436
VMScore
CVE-2022-25946
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions before 9.0, when running in Appliance mode, an authenticated attacker with Administrator role privilege may be able ...
F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Application Security Manager 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Web Application Firewall 15.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Advanced Web Application Firewall 14.1.4F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Access Policy Manager 13.1.1F5 Big-ip Access Policy Manager 13.1.3F5 Big-ip Access Policy Manager 13.1.4F5 Big-ip Access Policy Manager 13.1.5F5 Big-ip Access Policy Manager 14.1.2F5 Big-ip Access Policy Manager 14.1.3F5 Big-ip Access Policy Manager 15.1.1F5 Big-ip Access Policy Manager 15.1.2F5 Big-ip Access Policy Manager 15.1.3F5 Big-ip Access Policy Manager 15.1.4F5 Big-ip Access Policy Manager 15.1.5F5 Big-ip Access Policy Manager 16.1.0
445
VMScore
CVE-2022-26890
On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions before 16.1.2.1, 15.1.x versions before 15.1.5, 14.1.x versions before 14.1.4.6, and 13.1.x versions before 13.1.5, when ASM or Advanced WAF, as well as APM, are configured on a virtual server, the ASM policy is configured w...
F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Application Security Manager 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Web Application Firewall 15.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Advanced Web Application Firewall 14.1.4F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Access Policy Manager 13.1.1F5 Big-ip Access Policy Manager 13.1.3F5 Big-ip Access Policy Manager 13.1.4F5 Big-ip Access Policy Manager 13.1.5F5 Big-ip Access Policy Manager 14.1.2F5 Big-ip Access Policy Manager 14.1.3F5 Big-ip Access Policy Manager 15.1.1F5 Big-ip Access Policy Manager 15.1.2F5 Big-ip Access Policy Manager 15.1.3F5 Big-ip Access Policy Manager 15.1.4F5 Big-ip Access Policy Manager 15.1.5F5 Big-ip Access Policy Manager 16.1.0
516
VMScore
CVE-2019-6649
F5 BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 and Enterprise Manager 3.1.1 may expose sensitive information and allow the system configuration to be modified when using non-default ConfigSync settings.
F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 14.0.0F5 Big-ip Application Security Manager 15.0.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 14.0.0F5 Big-ip Local Traffic Manager 14.1.0F5 Big-ip Local Traffic Manager 15.0.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 14.0.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Advanced Firewall Manager 15.0.0F5 Big-ip AnalyticsF5 Big-ip Analytics 14.0.0F5 Big-ip Analytics 14.1.0F5 Big-ip Analytics 15.0.0F5 Big-ip Access Policy Manager 14.0.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Access Policy Manager 15.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Domain Name SystemF5 Big-ip Domain Name System 14.0.0
605
VMScore
CVE-2019-9075
An issue exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap in archive64.c.
Gnu Binutils 2.32Netapp Hci Management Node -Netapp Solidfire -Canonical Ubuntu Linux 18.04F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Access Policy Manager 15.0.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Advanced Firewall Manager 15.0.0F5 Big-ip Analytics 14.1.0F5 Big-ip Analytics 15.0.0F5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Application Acceleration Manager 15.0.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Application Security Manager 15.0.0F5 Big-ip Domain Name System 14.1.0F5 Big-ip Domain Name System 15.0.0F5 Big-ip Edge Gateway 14.1.0F5 Big-ip Edge Gateway 15.0.0F5 Big-ip Fraud Protection Service 14.1.0F5 Big-ip Fraud Protection Service 15.0.0F5 Big-ip Global Traffic Manager 14.1.0F5 Big-ip Global Traffic Manager 15.0.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook