Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
big-ip advanced firewall manager vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2020-27714
On the BIG-IP AFM version 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5, when a Protocol Inspection Profile is attached to a FastL4 virtual server with the protocol field configured to either Other or All Protocols, the TMM may experience a restart if the profile processes ...
F5 Big-ip Advanced Firewall Manager
NA
CVE-2022-41806
In versions 16.1.x prior to 16.1.3.2 and 15.1.x prior to 15.1.5.1, when BIG-IP AFM Network Address Translation policy with IPv6/IPv4 translation rules is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.
F5 Big-ip Advanced Firewall Manager
3.5
CVSSv2
CVE-2021-22983
On BIG-IP AFM version 15.1.x prior to 15.1.1, 14.1.x prior to 14.1.3.1, and 13.1.x prior to 13.1.3.5, authenticated users accessing the Configuration utility for AFM are vulnerable to a cross-site scripting attack if they attempt to access a maliciously-crafted URL. Note: Softwar...
F5 Big-ip Advanced Firewall Manager
7.1
CVSSv2
CVE-2022-23018
On BIG-IP AFM version 16.1.x prior to 16.1.2, 15.1.x prior to 15.1.4.1, 14.1.x prior to 14.1.4.5, and 13.1.x beginning in 13.1.3.4, when a virtual server is configured with both HTTP protocol security and HTTP Proxy Connect profiles, undisclosed requests can cause the Traffic Man...
F5 Big-ip Advanced Firewall Manager
NA
CVE-2023-22281
On versions 17.0.x prior to 17.0.0.2, 16.1.x prior to 16.1.3.3, 15.1.x prior to 15.1.8, 14.1.x prior to 14.1.5.3, and all versions of 13.1.x, when a BIG-IP AFM NAT policy with a destination NAT rule is configured on a FastL4 virtual server, undisclosed traffic can cause the Traff...
F5 Big-ip Advanced Firewall Manager
7.1
CVSSv2
CVE-2020-5937
On BIG-IP AFM 15.1.0-15.1.0.5, the Traffic Management Microkernel (TMM) may produce a core file while processing layer 4 (L4) behavioral denial-of-service (DoS) traffic.
F5 Big-ip Advanced Firewall Manager
4.3
CVSSv2
CVE-2018-15313
On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page.
F5 Big-ip Advanced Firewall Manager
4.3
CVSSv2
CVE-2018-15314
On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page.
F5 Big-ip Advanced Firewall Manager
4.3
CVSSv2
CVE-2022-23028
On BIG-IP AFM version 16.x prior to 16.1.0, 15.1.x prior to 15.1.5, 14.1.x prior to 14.1.4.5, and all versions of 13.1.x, when global AFM SYN cookie protection (TCP Half Open flood vector) is activated in the AFM Device Dos or DOS profile, certain types of TCP connections will fa...
F5 Big-ip Advanced Firewall Manager
6.8
CVSSv2
CVE-2022-28716
On 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, 14.1.x versions before 14.1.4.6, 13.1.x versions before 13.1.5, and all versions of 12.1.x 11.6.x, a DOM-based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP AFM, CGNAT, and...
F5 Big-ip Advanced Firewall Manager
F5 Big-ip Policy Enforcement Manager
F5 Big-ip Carrier-grade Nat
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5841
file upload
man-in-the-middle
arbitrary
CVE-2024-27801
CVE-2024-28020
CVE-2024-30080
CVE-2024-30069
CVE-2024-5843
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »