F5

Big-ip Access Policy Manager

538 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.4

CVE-2013-6024

  • EPSS 0.08%
  • Veröffentlicht 10.02.2014 18:15:10
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Edge Client components in F5 BIG-IP APM 10.x, 11.x, 12.x, 13.x, and 14.x, BIG-IP Edge Gateway 10.x and 11.x, and FirePass 7.0.0 allow attackers to obtain sensitive information from process memory via unspecified vectors.

7.5

CVE-2012-3000

  • EPSS 1.28%
  • Veröffentlicht 30.01.2014 15:06:21
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Multiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM WebGUI in F5 BIG-IP LTM, GTM, ASM, Link Controller, PSM, APM, Edge Gateway, and Analytics and (2) AVR WebGUI in WebAccelerator and WOM 11.2.x before 11.2....

7.8

CVE-2013-6016

  • EPSS 1.28%
  • Veröffentlicht 26.10.2013 17:55:03
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, APM, ASM, Edge Gateway, GTM, Link Controller, and WOM 10.0.0 through 10.2.2 and 11.0.0; Analytics 11.0.0; PSM 9.4.0 through 9.4.8, 10.0.0 through 10.2.4, and 11.0.0 through 11.4.1; and WebAcc...

4.3

CVE-2013-5975

  • EPSS 0.5%
  • Veröffentlicht 01.10.2013 20:55:34
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The access policy logon page (logon.inc) in F5 BIG-IP APM 11.1.0 through 11.2.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors.

4.3

CVE-2013-5976

  • EPSS 0.46%
  • Veröffentlicht 01.10.2013 20:55:34
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in the access policy logout page (logout.inc) in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.1.0 through 11.3.0 allows remote attackers to inject arbitrary web script or HTML via the LastMRH_Session cookie.

9.3

CVE-2013-0150

  • EPSS 1.06%
  • Veröffentlicht 09.08.2013 20:56:06
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products "when APM is provisioned...

9

CVE-2012-3163

  • EPSS 0.87%
  • Veröffentlicht 17.10.2012 00:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Information Sc...

9.1

CVE-2011-3188

  • EPSS 2.3%
  • Veröffentlicht 24.05.2012 23:55:02
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service (disrupted ...