Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

f5 big-ip application security manager 14.1.4 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2021-23007
On BIG-IP versions 14.1.4 and 16.0.1.1, when the Traffic Management Microkernel (TMM) process handles certain undisclosed traffic, it may start dropping all fragmented IP traffic. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.
F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Access Policy Manager 16.0.1.1F5 Big-ip Advanced Firewall Manager 14.1.4F5 Big-ip Advanced Firewall Manager 16.0.1.1F5 Big-ip Advanced Web Application Firewall 14.1.4F5 Big-ip Advanced Web Application Firewall 16.0.1.1F5 Big-ip Analytics 14.1.4F5 Big-ip Analytics 16.0.1.1F5 Big-ip Application Acceleration Manager 14.1.4F5 Big-ip Application Acceleration Manager 16.0.1.1F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Application Security Manager 16.0.1.1F5 Big-ip Ddos Hybrid Defender 14.1.4F5 Big-ip Ddos Hybrid Defender 16.0.1.1F5 Big-ip Domain Name System 14.1.4F5 Big-ip Domain Name System 16.0.1.1F5 Big-ip Edge Gateway 14.1.4F5 Big-ip Edge Gateway 16.0.1.1F5 Big-ip Fraud Protection Service 14.1.4F5 Big-ip Fraud Protection Service 16.0.1.1F5 Big-ip Global Traffic Manager 14.1.4F5 Big-ip Global Traffic Manager 16.0.1.1
6
CVSSv2
CVE-2022-27806
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions before 9.0, when running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to...
F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Application Security Manager 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Web Application Firewall 15.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Advanced Web Application Firewall 14.1.4F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Access Policy Manager 13.1.1F5 Big-ip Access Policy Manager 13.1.3F5 Big-ip Access Policy Manager 13.1.4F5 Big-ip Access Policy Manager 13.1.5F5 Big-ip Access Policy Manager 14.1.2F5 Big-ip Access Policy Manager 14.1.3F5 Big-ip Access Policy Manager 15.1.1F5 Big-ip Access Policy Manager 15.1.2F5 Big-ip Access Policy Manager 15.1.3F5 Big-ip Access Policy Manager 15.1.4F5 Big-ip Access Policy Manager 15.1.5F5 Big-ip Access Policy Manager 16.1.0
4.9
CVSSv2
CVE-2022-25946
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions before 9.0, when running in Appliance mode, an authenticated attacker with Administrator role privilege may be able ...
F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Application Security Manager 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Web Application Firewall 15.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Advanced Web Application Firewall 14.1.4F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Access Policy Manager 13.1.1F5 Big-ip Access Policy Manager 13.1.3F5 Big-ip Access Policy Manager 13.1.4F5 Big-ip Access Policy Manager 13.1.5F5 Big-ip Access Policy Manager 14.1.2F5 Big-ip Access Policy Manager 14.1.3F5 Big-ip Access Policy Manager 15.1.1F5 Big-ip Access Policy Manager 15.1.2F5 Big-ip Access Policy Manager 15.1.3F5 Big-ip Access Policy Manager 15.1.4F5 Big-ip Access Policy Manager 15.1.5F5 Big-ip Access Policy Manager 16.1.0
5
CVSSv2
CVE-2022-26890
On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions before 16.1.2.1, 15.1.x versions before 15.1.5, 14.1.x versions before 14.1.4.6, and 13.1.x versions before 13.1.5, when ASM or Advanced WAF, as well as APM, are configured on a virtual server, the ASM policy is configured w...
F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Application Security Manager 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Web Application Firewall 15.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Advanced Web Application Firewall 14.1.4F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Access Policy Manager 13.1.1F5 Big-ip Access Policy Manager 13.1.3F5 Big-ip Access Policy Manager 13.1.4F5 Big-ip Access Policy Manager 13.1.5F5 Big-ip Access Policy Manager 14.1.2F5 Big-ip Access Policy Manager 14.1.3F5 Big-ip Access Policy Manager 15.1.1F5 Big-ip Access Policy Manager 15.1.2F5 Big-ip Access Policy Manager 15.1.3F5 Big-ip Access Policy Manager 15.1.4F5 Big-ip Access Policy Manager 15.1.5F5 Big-ip Access Policy Manager 16.1.0
5
CVSSv2
CVE-2022-29491
On F5 BIG-IP LTM, Advanced WAF, ASM, or APM 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5, 14.1.x versions before 14.1.4.6, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a virtual server is configured with HTTP, TCP on one side (client/server), and DTLS on...
F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Local Traffic Manager 12.1.2F5 Big-ip Access Policy Manager 12.1.2F5 Big-ip Application Security Manager 12.1.1F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Access Policy Manager 12.1.1F5 Big-ip Application Security Manager 12.1.0F5 Big-ip Application Security Manager 11.6.1F5 Big-ip Access Policy Manager 12.1.0F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Access Policy Manager 11.6.1F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Access Policy Manager 16.1.0F5 Big-ip Application Security Manager 12.1.2F5 Big-ip Application Security Manager 13.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Application Security Manager 16.1.0
4
CVSSv2
CVE-2022-27659
On F5 BIG-IP 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, and 14.1.x versions before 14.1.4.6, an authenticated attacker can modify or delete Dashboards created by other BIG-IP users in the Traffic Management User Interface (TMUI). Note: Software versions whi...
F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Link Controller 14.1.0F5 Big-ip Policy Enforcement Manager 14.1.0F5 Big-ip Local Traffic Manager 14.1.0F5 Big-ip Analytics 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Domain Name System 14.1.0F5 Big-ip Global Traffic Manager 14.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Firewall Manager 14.1.4F5 Big-ip Advanced Firewall Manager 15.1.0F5 Big-ip Analytics 14.1.4F5 Big-ip Analytics 15.1.0F5 Big-ip Application Acceleration Manager 14.1.4F5 Big-ip Application Acceleration Manager 15.1.0F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Domain Name System 14.1.4F5 Big-ip Domain Name System 15.1.0
5
CVSSv2
CVE-2022-26370
On F5 BIG-IP 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5, and 14.1.x versions before 14.1.4.6, when a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, un...
F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Link Controller 14.1.0F5 Big-ip Policy Enforcement Manager 14.1.0F5 Big-ip Local Traffic Manager 14.1.0F5 Big-ip Analytics 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Domain Name System 14.1.0F5 Big-ip Global Traffic Manager 14.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Firewall Manager 14.1.4F5 Big-ip Advanced Firewall Manager 15.1.0F5 Big-ip Analytics 14.1.4F5 Big-ip Analytics 15.1.0F5 Big-ip Application Acceleration Manager 14.1.4F5 Big-ip Application Acceleration Manager 15.1.0F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Domain Name System 14.1.4F5 Big-ip Domain Name System 15.1.0
4.3
CVSSv2
CVE-2022-27182
On F5 BIG-IP 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, and 14.1.x versions before 14.1.4.6, when BIG-IP packet filters are enabled and a virtual server is configured with the type set to Reject, undisclosed requests can cause an increase in memory resource...
F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Link Controller 14.1.0F5 Big-ip Policy Enforcement Manager 14.1.0F5 Big-ip Local Traffic Manager 14.1.0F5 Big-ip Analytics 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Domain Name System 14.1.0F5 Big-ip Global Traffic Manager 14.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Firewall Manager 14.1.4F5 Big-ip Advanced Firewall Manager 15.1.0F5 Big-ip Analytics 14.1.4F5 Big-ip Analytics 15.1.0F5 Big-ip Application Acceleration Manager 14.1.4F5 Big-ip Application Acceleration Manager 15.1.0F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Domain Name System 14.1.4F5 Big-ip Domain Name System 15.1.0
4
CVSSv2
CVE-2022-28859
On F5 BIG-IP 15.1.x versions before 15.1.5.1 and 14.1.x versions before 14.1.4.6, when installing Net HSM, the scripts (nethsm-safenet-install.sh and nethsm-thales-install.sh) expose the Net HSM partition password. Note: Software versions which have reached End of Technical Suppo...
F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Link Controller 14.1.0F5 Big-ip Policy Enforcement Manager 14.1.0F5 Big-ip Local Traffic Manager 14.1.0F5 Big-ip Analytics 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Domain Name System 14.1.0F5 Big-ip Global Traffic Manager 14.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Firewall Manager 14.1.4F5 Big-ip Advanced Firewall Manager 15.1.0F5 Big-ip Analytics 14.1.4F5 Big-ip Analytics 15.1.0F5 Big-ip Application Acceleration Manager 14.1.4F5 Big-ip Application Acceleration Manager 15.1.0F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Domain Name System 14.1.4F5 Big-ip Domain Name System 15.1.0
3.5
CVSSv2
CVE-2022-28707
On F5 BIG-IP 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, and 14.1.x versions before 14.1.4.6, a stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility (also referred to as the BIG-IP TMUI) that allow...
F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Link Controller 14.1.0F5 Big-ip Policy Enforcement Manager 14.1.0F5 Big-ip Local Traffic Manager 14.1.0F5 Big-ip Analytics 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Domain Name System 14.1.0F5 Big-ip Global Traffic Manager 14.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Firewall Manager 14.1.4F5 Big-ip Advanced Firewall Manager 15.1.0F5 Big-ip Analytics 14.1.4F5 Big-ip Analytics 15.1.0F5 Big-ip Application Acceleration Manager 14.1.4F5 Big-ip Application Acceleration Manager 15.1.0F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Domain Name System 14.1.4F5 Big-ip Domain Name System 15.1.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook