F5

Big-ip Access Policy Manager

538 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2021-23052

  • EPSS 0.22%
  • Published 14.09.2021 13:15:11
  • Last modified 21.11.2024 05:51:13

On version 14.1.x before 14.1.4.4 and all versions of 13.1.x, an open redirect vulnerability exists on virtual servers enabled with a BIG-IP APM access policy. This vulnerability allows an unauthenticated malicious user to build an open redirect URI....

7.5

CVE-2021-23048

  • EPSS 0.89%
  • Published 14.09.2021 13:15:10
  • Last modified 21.11.2024 05:51:13

On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, when GPRS Tunneling Protocol (GTP) iRules commands or a GTP profile is configured on a virtual se...

7.8

CVE-2021-23022

  • EPSS 0.14%
  • Published 10.06.2021 16:15:08
  • Last modified 21.11.2024 05:51:10

On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, the BIG-IP Edge Client Windows Installer Service's temporary folder has weak file and folder permissions. Note: Software versions which have reached End of Technical Support (EoTS) ...

7.8

CVE-2021-23023

  • EPSS 0.09%
  • Published 10.06.2021 15:15:09
  • Last modified 21.11.2024 05:51:10

On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, a DLL hijacking issue exists in cachecleaner.dll included in the BIG-IP Edge Client Windows Installer. Note: Software versions which have reached End of Technical Support (EoTS) are...

7.5

CVE-2021-23009

  • EPSS 0.65%
  • Published 10.05.2021 15:15:07
  • Last modified 21.11.2024 05:51:08

On BIG-IP version 16.0.x before 16.0.1.1 and 15.1.x before 15.1.3, malformed HTTP/2 requests may cause an infinite loop which causes a Denial of Service for Data Plane traffic. TMM takes the configured HA action when the TMM process is aborted. There...

8.2

CVE-2021-23012

  • EPSS 0.19%
  • Published 10.05.2021 15:15:07
  • Last modified 21.11.2024 05:51:08

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, and 13.1.x before 13.1.4, lack of input validation for items used in the system support functionality may allow users granted either "Resource Administrator" or "A...

7.2

CVE-2021-23015

  • EPSS 0.09%
  • Published 10.05.2021 15:15:07
  • Last modified 21.11.2024 05:51:09

On BIG-IP 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.0.8 through 13.1.3.6, and all versions of 16.0.x, when running in Appliance Mode, an authenticated user assigned the 'Administrator' role may be able to bypass Appliance Mode restrictions u...

5.3

CVE-2021-23016

  • EPSS 0.26%
  • Published 10.05.2021 15:15:07
  • Last modified 21.11.2024 05:51:09

On BIG-IP APM versions 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, and all versions of 16.0.x, 12.1.x, and 11.6.x, an attacker may be able to bypass APM's internal restrictions and retrieve static content that is hosted within...

9.8

CVE-2021-23008

  • EPSS 0.61%
  • Published 10.05.2021 14:15:07
  • Last modified 21.11.2024 05:51:08

On version 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and all versions of 16.0.x and 11.6.x., BIG-IP APM AD (Active Directory) authentication can be bypassed via a spoofed AS-REP (Kerberos Authentication S...

7.5

CVE-2021-23011

  • EPSS 0.65%
  • Published 10.05.2021 14:15:07
  • Last modified 21.11.2024 05:51:08

On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, when the BIG-IP system is buffering packet fragments for reassembly, the Traffic Management Microk...