Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

access-policy vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv3
CVE-2022-29263
On F5 BIG-IP APM 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, 14.1.x versions before 14.1.4.6, 13.1.x versions before 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions before 7.2.1.5, the BIG-IP Edge Client Component...
F5 Big-ip Access Policy Manager 12.1.2F5 Big-ip Access Policy Manager 12.1.1F5 Big-ip Access Policy Manager 12.1.0F5 Big-ip Access Policy Manager 11.6.1F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Access Policy Manager 16.1.0F5 Big-ip Access Policy Manager 17.0.0F5 Big-ip Access Policy Manager 11.6.3F5 Big-ip Access Policy Manager 11.6.4F5 Big-ip Access Policy Manager 11.6.5F5 Big-ip Access Policy Manager 12.1.3F5 Big-ip Access Policy Manager 12.1.4F5 Big-ip Access Policy Manager 12.1.5F5 Big-ip Access Policy Manager 12.1.6F5 Big-ip Access Policy Manager 13.1.1F5 Big-ip Access Policy Manager 13.1.3F5 Big-ip Access Policy Manager 13.1.4F5 Big-ip Access Policy Manager 13.1.5F5 Big-ip Access Policy Manager 14.1.2
5.3
CVSSv3
CVE-2022-27181
On F5 BIG-IP APM 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, 14.1.x versions before 14.1.4.6, 13.1.x versions before 13.1.5, and all versions of 12.1.x and 11.6.x, when APM is configured on a virtual server and the associated access profile is configured wit...
F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Access Policy Manager 16.1.0F5 Big-ip Access Policy Manager 16.1.2F5 Big-ip Access Policy Manager 16.1.1F5 Big-ip Access Policy Manager 15.1.5F5 Big-ip Access Policy Manager 15.1.4F5 Big-ip Access Policy Manager 15.1.3F5 Big-ip Access Policy Manager 13.1.1F5 Big-ip Access Policy Manager 13.1.3F5 Big-ip Access Policy Manager 13.1.4F5 Big-ip Access Policy Manager 13.1.5F5 Big-ip Access Policy Manager 14.1.2F5 Big-ip Access Policy Manager 14.1.3F5 Big-ip Access Policy Manager 15.1.1F5 Big-ip Access Policy Manager 15.1.2
7.8
CVSSv3
CVE-2022-28714
On F5 BIG-IP APM 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, 14.1.x versions before 14.1.4.6, 13.1.x versions before 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions before 7.2.1.5, a DLL Hijacking vulnerability ex...
F5 Big-ip Access Policy Manager 12.1.2F5 Big-ip Access Policy Manager 12.1.1F5 Big-ip Access Policy Manager 12.1.0F5 Big-ip Access Policy Manager 11.6.1F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Access Policy Manager Client 7.1.7F5 Big-ip Access Policy Manager Client 7.1.6F5 Big-ip Access Policy Manager Client 7.1.6.1F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Access Policy Manager 12.1.4F5 Big-ip Access Policy Manager 12.1.5F5 Big-ip Access Policy Manager 12.1.6F5 Big-ip Access Policy Manager 13.1.1F5 Big-ip Access Policy Manager 13.1.3F5 Big-ip Access Policy Manager 13.1.4F5 Big-ip Access Policy Manager 13.1.5F5 Big-ip Access Policy Manager 14.1.2F5 Big-ip Access Policy Manager 14.1.3F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Access Policy Manager 15.1.1F5 Big-ip Access Policy Manager 15.1.2
9.8
CVSSv3
CVE-2020-7674
access-policy up to and including 3.1.0 is vulnerable to Arbitrary Code Execution. User input provided to the `template` function is executed by the `eval` function resulting in code execution.
Access-policy Project Access-policy
6.1
CVSSv3
CVE-2022-27230
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP APM, and F5 BIG-IP Guided Configuration (GC) all versions before 9.0, a reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of F5 BIG-IP Guided Configuration that allow...
F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Access Policy Manager 16.1.0F5 Big-ip Access Policy Manager 16.1.2F5 Big-ip Access Policy Manager 16.1.1F5 Big-ip Access Policy Manager 15.1.5F5 Big-ip Access Policy Manager 15.1.4F5 Big-ip Access Policy Manager 15.1.3F5 Big-ip Access Policy Manager 13.1.1F5 Big-ip Access Policy Manager 13.1.3F5 Big-ip Access Policy Manager 13.1.4F5 Big-ip Access Policy Manager 13.1.5F5 Big-ip Access Policy Manager 14.1.2F5 Big-ip Access Policy Manager 14.1.3F5 Big-ip Access Policy Manager 15.1.1F5 Big-ip Access Policy Manager 15.1.2F5 Big-ip Guided Configuration
7.6
CVSSv3
CVE-2017-0301
In F5 BIG-IP APM software versions 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 and 12.1.2 BIG-IP APM portal access requests do not return the intended resources in some cases. This may allow access to internal BIG-IP APM resources, however the a...
F5 Big-ip Access Policy Manager 11.5.1F5 Big-ip Access Policy Manager 11.5.2F5 Big-ip Access Policy Manager 11.5.3F5 Big-ip Access Policy Manager 11.5.4F5 Big-ip Access Policy Manager 12.1.1F5 Big-ip Access Policy Manager 12.1.2F5 Big-ip Access Policy Manager 11.6.1F5 Big-ip Access Policy Manager 12.1.0F5 Big-ip Access Policy Manager 11.5.0F5 Big-ip Access Policy Manager 11.6.0F5 Big-ip Access Policy Manager 12.0.0
9.8
CVSSv3
CVE-2015-8098
F5 BIG-IP APM 11.4.1 prior to 11.4.1 HF9, 11.5.x prior to 11.5.3, and 11.6.0 prior to 11.6.0 HF4 allow remote malicious users to cause a denial of service or execute arbitrary code via unspecified vectors related to processing a Citrix Remote Desktop connection through a virtual ...
F5 Big-ip Access Policy Manager 11.5.1F5 Big-ip Access Policy Manager 11.6.0F5 Big-ip Access Policy Manager 11.2.0F5 Big-ip Access Policy Manager 11.2.1F5 Big-ip Access Policy Manager 11.4.0F5 Big-ip Access Policy Manager 11.3.0F5 Big-ip Access Policy Manager 11.5.0
5.3
CVSSv3
CVE-2016-7467
The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider (SP) connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authenticatio...
F5 Big-ip Access Policy Manager 12.1.1F5 Big-ip Access Policy Manager 12.0.0F5 Big-ip Access Policy Manager 11.6.0F5 Big-ip Access Policy Manager 11.5.4F5 Big-ip Access Policy Manager 12.1.0F5 Big-ip Access Policy Manager 11.6.1
5.3
CVSSv3
CVE-2016-3687
Open redirect vulnerability in F5 BIG-IP APM 11.2.1, 11.4.x, 11.5.x, and 11.6.x prior to 11.6.0 HF6 and Edge Gateway 11.2.1, when using multi-domain single sign-on (SSO), allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a bas...
F5 Big-ip Access Policy Manager 11.5.4F5 Big-ip Access Policy Manager 11.5.3F5 Big-ip Access Policy Manager 11.5.2F5 Big-ip Access Policy Manager 11.5.1F5 Big-ip Access Policy Manager 11.6.0F5 Big-ip Access Policy Manager 11.5.0F5 Big-ip Access Policy Manager 11.4.0F5 Big-ip Access Policy Manager 11.4.1F5 Big-ip Access Policy Manager 11.2.1F5 Big-ip Edge Gateway 11.2.1
5.3
CVSSv3
CVE-2017-0302
In F5 BIG-IP APM 12.0.0 up to and including 12.1.2 and 13.0.0, an authenticated user with an established access session to the BIG-IP APM system may be able to cause a traffic disruption if the length of the requested URL is less than 16 characters.
F5 Big-ip Access Policy Manager 12.1.0F5 Big-ip Access Policy Manager 12.0.0F5 Big-ip Access Policy Manager 13.0.0F5 Big-ip Access Policy Manager 12.1.1F5 Big-ip Access Policy Manager 12.1.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-2907hardcodedinjectCVE-2024-20359CVE-2024-2467CVE-2024-4077CVE-2024-22391cameraCVE-2024-20353
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook