Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

f5 big-ip advanced firewall manager vulnerabilities and exploits

(subscribe to this query)
7.2
CVSSv3

CVE-2022-28695

On F5 BIG-IP AFM 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, 14.1.x versions before 14.1.4.6, and 13.1.x versions before 13.1.5, an authenticated attacker with high privileges can upload a maliciously crafted file to the BIG-IP AFM Configuration utility, whi...
F5 Big-ip Advanced Firewall Manager 13.1.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Advanced Firewall Manager 15.1.0F5 Big-ip Advanced Firewall Manager 14.1.4F5 Big-ip Advanced Firewall Manager 16.1.0F5 Big-ip Advanced Firewall Manager 17.0.0F5 Big-ip Advanced Firewall Manager 16.1.2F5 Big-ip Advanced Firewall Manager 16.1.1F5 Big-ip Advanced Firewall Manager 15.1.5F5 Big-ip Advanced Firewall Manager 15.1.4F5 Big-ip Advanced Firewall Manager 15.1.3F5 Big-ip Advanced Firewall Manager 15.1.2F5 Big-ip Advanced Firewall Manager 15.1.1F5 Big-ip Advanced Firewall Manager 14.1.3F5 Big-ip Advanced Firewall Manager 14.1.2F5 Big-ip Advanced Firewall Manager 13.1.5F5 Big-ip Advanced Firewall Manager 13.1.4F5 Big-ip Advanced Firewall Manager 13.1.3F5 Big-ip Advanced Firewall Manager 13.1.1
5.4
CVSSv3

CVE-2017-0304

A SQL injection vulnerability exists in the BIG-IP AFM management UI on versions 12.0.0, 12.1.0, 12.1.1, 12.1.2 and 13.0.0 that may allow a copy of the firewall rules to be tampered with and impact the Configuration Utility until there is a resync of the rules. Traffic processing...
F5 Big-ip Advanced Firewall Manager 12.1.0F5 Big-ip Advanced Firewall Manager 12.1.2F5 Big-ip Advanced Firewall Manager 12.1.1F5 Big-ip Advanced Firewall Manager 12.0.0F5 Big-ip Advanced Firewall Manager 13.0.0
4.8
CVSSv3

CVE-2017-6142

X509 certificate verification was not correctly implemented in the early access "user id" feature in the F5 BIG-IP Advanced Firewall Manager versions 13.0.0, 12.1.0-12.1.2, and 11.6.0-11.6.2, and thus did not properly validate the remote server's identity on certai...
F5 Big-ip Advanced Firewall Manager 13.0.0F5 Big-ip Advanced Firewall Manager
6.5
CVSSv3

CVE-2022-25946

On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions before 9.0, when running in Appliance mode, an authenticated attacker with Administrator role privilege may be able ...
F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Application Security Manager 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Web Application Firewall 15.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Advanced Web Application Firewall 14.1.4F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Advanced Web Application Firewall 16.1.0F5 Big-ip Access Policy Manager 16.1.0F5 Big-ip Application Security Manager 16.1.0F5 Big-ip Access Policy Manager 16.1.2F5 Big-ip Access Policy Manager 16.1.1F5 Big-ip Access Policy Manager 15.1.5F5 Big-ip Access Policy Manager 15.1.4F5 Big-ip Access Policy Manager 15.1.3F5 Big-ip Access Policy Manager 15.1.2F5 Big-ip Access Policy Manager 15.1.1F5 Big-ip Access Policy Manager 14.1.3F5 Big-ip Access Policy Manager 14.1.2
7.2
CVSSv3

CVE-2022-27806

On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions before 9.0, when running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to...
F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Application Security Manager 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Web Application Firewall 15.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Advanced Web Application Firewall 14.1.4F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Advanced Web Application Firewall 16.1.0F5 Big-ip Access Policy Manager 16.1.0F5 Big-ip Application Security Manager 16.1.0F5 Big-ip Access Policy Manager 16.1.2F5 Big-ip Access Policy Manager 16.1.1F5 Big-ip Access Policy Manager 15.1.5F5 Big-ip Access Policy Manager 15.1.4F5 Big-ip Access Policy Manager 15.1.3F5 Big-ip Access Policy Manager 15.1.2F5 Big-ip Access Policy Manager 15.1.1F5 Big-ip Access Policy Manager 14.1.3F5 Big-ip Access Policy Manager 14.1.2
7.5
CVSSv3

CVE-2022-26890

On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions before 16.1.2.1, 15.1.x versions before 15.1.5, 14.1.x versions before 14.1.4.6, and 13.1.x versions before 13.1.5, when ASM or Advanced WAF, as well as APM, are configured on a virtual server, the ASM policy is configured w...
F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Application Security Manager 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Web Application Firewall 15.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Advanced Web Application Firewall 14.1.4F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Advanced Web Application Firewall 16.1.0F5 Big-ip Access Policy Manager 16.1.0F5 Big-ip Application Security Manager 16.1.0F5 Big-ip Access Policy Manager 16.1.2F5 Big-ip Access Policy Manager 16.1.1F5 Big-ip Access Policy Manager 15.1.5F5 Big-ip Access Policy Manager 15.1.4F5 Big-ip Access Policy Manager 15.1.3F5 Big-ip Access Policy Manager 15.1.2F5 Big-ip Access Policy Manager 15.1.1F5 Big-ip Access Policy Manager 14.1.3F5 Big-ip Access Policy Manager 14.1.2
7.5
CVSSv3

CVE-2022-29491

On F5 BIG-IP LTM, Advanced WAF, ASM, or APM 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5, 14.1.x versions before 14.1.4.6, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a virtual server is configured with HTTP, TCP on one side (client/server), and DTLS on...
F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Local Traffic Manager 12.1.2F5 Big-ip Access Policy Manager 12.1.2F5 Big-ip Application Security Manager 12.1.1F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Access Policy Manager 12.1.1F5 Big-ip Application Security Manager 12.1.0F5 Big-ip Application Security Manager 11.6.1F5 Big-ip Access Policy Manager 12.1.0F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Application Security Manager 12.1.2F5 Big-ip Access Policy Manager 11.6.1F5 Big-ip Local Traffic Manager 13.1.0F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Application Security Manager 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Local Traffic Manager 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Local Traffic Manager 15.1.0F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Web Application Firewall 15.1.0
7.5
CVSSv3

CVE-2022-41836

When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.
F5 Big-ip Application Security Manager 17.0.0F5 Big-ip Advanced Web Application Firewall 17.0.0F5 Big-ip Application Security ManagerF5 Big-ip Advanced Web Application Firewall
7.5
CVSSv3

CVE-2021-23028

On version 16.0.x prior to 16.0.1.2, 15.1.x prior to 15.1.3.1, 14.1.x prior to 14.1.4.2, and 13.1.x prior to 13.1.4, when JSON content profiles are configured for URLs as part of an F5 Advanced Web Application Firewall (WAF)/BIG-IP ASM security policy and applied to a virtual ser...
F5 Big-ip Application Security ManagerF5 Big-ip Advanced Web Application FirewallF5 Big-ip Advanced Web Application Firewall 16.0.1F5 Big-ip Application Security Manager 16.0.1
6.1
CVSSv3

CVE-2019-6626

On BIG-IP (AFM, Analytics, ASM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.3.4, A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface (TMUI), also known as the Conf...
F5 Big-ip Advanced Firewall ManagerF5 Big-ip AnalyticsF5 Big-ip Application Security Manager
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-9474CVE-2024-36620file inclusioncache poisoningman-in-the-middleCVE-2024-20138CVE-2024-0012CVE-2024-20131CVE-2024-11995
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook