Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

big-ip application security manager vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2017-6155
On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or HTTP/2 requests may result in a disruption of service to TMM. Data plane is only exposed when a SPDY or HTTP/2 profile is attached to a virtual server. There is no control plane expos...
F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 11.2.1F5 Big-ip Local Traffic Manager 13.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 13.0.0F5 Big-ip Application Acceleration Manager 11.2.1F5 Big-ip Advanced Firewall Manager 11.2.1F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 13.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 11.2.1F5 Big-ip Access Policy Manager 13.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 11.2.1F5 Big-ip Application Security Manager 13.0.0F5 Big-ip Edge Gateway 11.2.1F5 Big-ip Edge GatewayF5 Big-ip Edge Gateway 13.0.0F5 Big-ip Link Controller 13.0.0F5 Big-ip Link ControllerF5 Big-ip Link Controller 11.2.1F5 Big-ip Policy Enforcement Manager
5.5
CVSSv2
CVE-2014-6032
Multiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM, ASM, GTM, and Link Controller 11.0 up to and including 11.6.0 and 10.0.0 up to and including 10.2.4, AAM 11.4.0 up to and including 11.6.0, ARM 11.3.0 up to and including 11.6.0, Ana...
F5 Big-ip Protocol Security Module 10.2.3F5 Big-ip Protocol Security Module 11.0.0F5 Big-ip Protocol Security Module 10.2.0F5 Big-ip Protocol Security Module 10.2.1F5 Big-ip Protocol Security Module 11.2.1F5 Big-ip Protocol Security Module 11.3.0F5 Big-ip Protocol Security Module 11.4.0F5 Big-ip Protocol Security Module 10.0.0F5 Big-ip Protocol Security Module 10.1.0F5 Big-ip Protocol Security Module 11.1.0F5 Big-ip Protocol Security Module 11.2.0F5 Big-ip Protocol Security Module 10.2.2F5 Big-ip Protocol Security Module 10.2.4F5 Big-ip Protocol Security Module 11.4.1F5 Big-ip Global Traffic Manager 10.0.0F5 Big-ip Global Traffic Manager 10.1.0F5 Big-ip Global Traffic Manager 11.1.0F5 Big-ip Global Traffic Manager 11.2.0F5 Big-ip Global Traffic Manager 11.6.0F5 Big-ip Global Traffic Manager 10.2.2F5 Big-ip Global Traffic Manager 10.2.3F5 Big-ip Global Traffic Manager 11.4.1
5
CVSSv2
CVE-2016-9252
The Traffic Management Microkernel (TMM) in F5 BIG-IP prior to 11.5.4 HF3, 11.6.x prior to 11.6.1 HF2 and 12.x prior to 12.1.2 does not properly handle minimum path MTU options for IPv6, which allows remote malicious users to cause a denial-of-service (DoS) through unspecified ve...
F5 Big-ip Local Traffic Manager 11.4.1F5 Big-ip Local Traffic Manager 11.5.0F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Local Traffic Manager 10.2.3F5 Big-ip Local Traffic Manager 10.2.4F5 Big-ip Local Traffic Manager 10.2.1F5 Big-ip Local Traffic Manager 10.2.2F5 Big-ip Local Traffic Manager 11.5.1F5 Big-ip Local Traffic Manager 11.5.2F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Local Traffic Manager 11.5.3F5 Big-ip Local Traffic Manager 11.5.4F5 Big-ip Local Traffic Manager 11.2.1F5 Big-ip Local Traffic Manager 11.4.0F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Application Acceleration Manager 11.4.0F5 Big-ip Application Acceleration Manager 11.6.0F5 Big-ip Application Acceleration Manager 11.6.1F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 11.5.1
5
CVSSv2
CVE-2019-6619
On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, the Traffic Management Microkernel (TMM) may restart when a virtual server has an HTTP/2 profile with Application Layer Protocol Negotiation (ALPN) enabled and it processes traffic where the ALPN extension size is zer...
F5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Link ControllerF5 Big-ip Policy Enforcement ManagerF5 Big-ip WebacceleratorF5 Big-ip Application Security ManagerF5 Big-ip Local Traffic Manager
4.3
CVSSv2
CVE-2013-3587
The HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which makes it easier for man-in-the-middle malicious users to obtain plaintext secret values by observing length differences ...
F5 Big-ip Access Policy Manager 13.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall Manager 13.0.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip Analytics 13.0.0F5 Big-ip AnalyticsF5 Big-ip Application Acceleration Manager 13.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Security Manager 13.0.0F5 Big-ip Application Security ManagerF5 Big-ip Edge GatewayF5 Big-ip Link Controller 13.0.0F5 Big-ip Link ControllerF5 Big-ip Local Traffic Manager 13.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Policy Enforcement Manager 13.0.0F5 Big-ip Policy Enforcement ManagerF5 Big-ip Protocol Security ModuleF5 Big-ip Wan Optimization ManagerF5 Big-ip WebacceleratorF5 Firepass 7.0.0F5 Firepass
4.3
CVSSv2
CVE-2017-6141
In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 up to and including 12.1.2, certain values in a TLS abbreviated handshake when using a client SSL profile with the Session Ticket option enabled may cause disruption of service to the Traffic Managemen...
F5 Big-ip Link Controller 12.1.0F5 Big-ip Link Controller 12.1.1F5 Big-ip Application Security Manager 12.1.2F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Application Acceleration Manager 12.1.1F5 Big-ip Application Acceleration Manager 12.1.2F5 Big-ip Websafe 12.1.0F5 Big-ip Websafe 12.1.2F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Application Security Manager 12.1.0F5 Big-ip Advanced Firewall Manager 12.1.1F5 Big-ip Access Policy Manager 12.1.2F5 Big-ip Policy Enforcement Manager 12.1.0F5 Big-ip Policy Enforcement Manager 12.1.1F5 Big-ip Policy Enforcement Manager 12.1.2F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Access Policy Manager 12.1.0F5 Big-ip Link Controller 12.1.2F5 Big-ip Websafe 12.1.1F5 Big-ip Local Traffic Manager 12.1.2F5 Big-ip Application Security Manager 12.1.1F5 Big-ip Advanced Firewall Manager 12.1.0
8.5
CVSSv2
CVE-2015-8022
The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x prior to 11.2.1 HF16, 11.3.x, 11.4.x prior to 11.4.1 HF10, 11.5.x prior to 11.5.4, and 11.6.x prior to 11.6.1; BIG-IP AAM 11.4.x prior to 11.4.1 HF10, 11.5.x prior to 11.5.4, and 11.6.x...
F5 Big-ip Global Traffic Manager 11.2.0F5 Big-ip Global Traffic Manager 11.1.0F5 Big-ip Global Traffic Manager 11.0.0F5 Big-ip Global Traffic Manager 11.5.3F5 Big-ip Global Traffic Manager 11.5.2F5 Big-ip Global Traffic Manager 11.5.1F5 Big-ip Global Traffic Manager 11.5.0F5 Big-ip Global Traffic Manager 11.4.0F5 Big-ip Global Traffic Manager 11.2.1F5 Big-ip Global Traffic Manager 11.6.0F5 Big-ip Global Traffic Manager 11.4.1F5 Big-ip Global Traffic Manager 11.3.0F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Local Traffic Manager 11.4.1F5 Big-ip Local Traffic Manager 11.4.0F5 Big-ip Local Traffic Manager 11.3.0F5 Big-ip Local Traffic Manager 11.1.0F5 Big-ip Local Traffic Manager 11.5.2F5 Big-ip Local Traffic Manager 11.5.0F5 Big-ip Local Traffic Manager 11.0.0F5 Big-ip Local Traffic Manager 11.2.1F5 Big-ip Local Traffic Manager 11.5.3
4
CVSSv2
CVE-2016-1497
The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x prior to 11.2.1 HF16, 11.3.x, 11.4.x prior to 11.4.1 HF10, 11.5.x prior to 11.5.4 HF2, 1.6.x prior to 11.6.1, and 12.0.0 before HF1 allows remote administrators to read Access Policy Manager (APM) access logs v...
F5 Big-ip Webaccelerator 11.2.0F5 Big-ip Webaccelerator 11.2.1F5 Big-ip Webaccelerator 11.3.0F5 Big-ip Webaccelerator 11.0.0F5 Big-ip Webaccelerator 11.1.0F5 Big-ip Link Controller 11.4.0F5 Big-ip Link Controller 11.4.1F5 Big-ip Link Controller 12.0.0F5 Big-ip Link Controller 11.0.0F5 Big-ip Link Controller 11.5.0F5 Big-ip Link Controller 11.5.1F5 Big-ip Link Controller 11.2.1F5 Big-ip Link Controller 11.3.0F5 Big-ip Link Controller 11.5.4F5 Big-ip Link Controller 11.6.0F5 Big-ip Link Controller 11.1.0F5 Big-ip Link Controller 11.2.0F5 Big-ip Link Controller 11.5.2F5 Big-ip Link Controller 11.5.3F5 Big-ip Access Policy Manager 11.5.4F5 Big-ip Access Policy Manager 11.6.0F5 Big-ip Access Policy Manager 12.0.0
7.5
CVSSv2
CVE-2016-5022
F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.x prior to 11.2.1 HF16, 11.3.x, 11.4.x, 11.5.x prior to 11.5.4 HF2, 11.6.x prior to 11.6.1 HF1, and 12.x prior to 12.0.0 HF3; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x prior to 11.5.4 HF2, 11.6.x prior to 11.6.1 HF1, and ...
F5 Big-ip Link Controller 11.2.1F5 Big-ip Link Controller 11.3.0F5 Big-ip Link Controller 11.4.0F5 Big-ip Link Controller 11.4.1F5 Big-ip Link Controller 11.6.1F5 Big-ip Link Controller 11.5.1F5 Big-ip Link Controller 11.5.3F5 Big-ip Link Controller 11.5.4F5 Big-ip Link Controller 11.6.0F5 Big-ip Link Controller 12.0.0F5 Big-ip Link Controller 11.2.0F5 Big-ip Link Controller 11.5.0F5 Big-ip Link Controller 11.5.2F5 Big-ip Policy Enforcement Manager 11.5.1F5 Big-ip Policy Enforcement Manager 11.5.2F5 Big-ip Policy Enforcement Manager 11.5.3F5 Big-ip Policy Enforcement Manager 11.5.4F5 Big-ip Policy Enforcement Manager 11.6.0F5 Big-ip Policy Enforcement Manager 11.6.1F5 Big-ip Policy Enforcement Manager 11.4.1F5 Big-ip Policy Enforcement Manager 12.0.0F5 Big-ip Policy Enforcement Manager 11.4.0
5
CVSSv2
CVE-2016-5736
The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4.x, 11.5.x prior to 11.5.4 HF2, 11.6.x prior to 11.6.1, and 12.x prior to 12.0.0 HF2; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x prior to 11.5....
F5 Big-ip Application Acceleration Manager 11.6.0F5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Application Acceleration Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 11.5.0F5 Big-ip Application Acceleration Manager 11.4.0F5 Big-ip Webaccelerator 11.2.1F5 Big-ip Analytics 12.0.0F5 Big-ip Analytics 11.6.0F5 Big-ip Analytics 11.5.2F5 Big-ip Analytics 11.4.1F5 Big-ip Analytics 11.4.0F5 Big-ip Analytics 11.2.1F5 Big-ip Analytics 11.5.4F5 Big-ip Analytics 11.5.1F5 Big-ip Analytics 11.5.3F5 Big-ip Analytics 11.5.0F5 Big-ip Domain Name System 12.0.0F5 Big-ip Edge Gateway 11.2.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook