F5

Big-ip Access Policy Manager

538 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.4

CVE-2023-39447

  • EPSS 0.15%
  • Published 10.10.2023 13:15:20
  • Last modified 21.11.2024 08:15:26

When BIG-IP APM Guided Configurations are configured, undisclosed sensitive information may be logged in restnoded log.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

7.5

CVE-2023-40534

  • EPSS 0.57%
  • Published 10.10.2023 13:15:20
  • Last modified 21.11.2024 08:19:40

When a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, and an iRule using the HTTP_REQUEST event or Local Traffic Policy are associated with the virtual server, undisclosed requests can cause TMM to termina...

8.1

CVE-2023-40537

  • EPSS 0.36%
  • Published 10.10.2023 13:15:20
  • Last modified 21.11.2024 08:19:40

An authenticated user's session cookie may remain valid for a limited time after logging out from the BIG-IP Configuration utility on a multi-blade VIPRION platform.  Note: Software versions which have reached End of Technical Support (EoTS) are no...

7.5

CVE-2023-40542

  • EPSS 0.58%
  • Published 10.10.2023 13:15:20
  • Last modified 19.09.2025 20:18:14

When TCP Verified Accept is enabled on a TCP profile that is configured on a Virtual Server, undisclosed requests can cause an increase in memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are no...

8.2

CVE-2023-43125

  • EPSS 0.15%
  • Published 27.09.2023 16:21:34
  • Last modified 21.11.2024 08:23:44

BIG-IP APM clients may send IP traffic outside of the VPN tunnel.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

7.1

CVE-2023-43124

  • EPSS 0.08%
  • Published 27.09.2023 16:21:33
  • Last modified 21.11.2024 08:23:44

BIG-IP APM clients may send IP traffic outside of the VPN tunnel.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

5.5

CVE-2023-36858

  • EPSS 0.07%
  • Published 02.08.2023 16:15:10
  • Last modified 21.11.2024 08:10:47

An insufficient verification of data vulnerability exists in BIG-IP Edge Client for Windows and macOS that may allow an attacker to modify its configured server list.  Note: Software versions which have reached End of Technical Support (EoTS) are no...

6.1

CVE-2023-38138

  • EPSS 0.52%
  • Published 02.08.2023 16:15:10
  • Last modified 21.11.2024 08:12:56

A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which allows an attacker to run JavaScript in the context of the currently logged-in user.  Note: Software versions which have rea...

7.8

CVE-2023-38418

  • EPSS 0.06%
  • Published 02.08.2023 16:15:10
  • Last modified 21.11.2024 08:13:31

The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

4.3

CVE-2023-38419

  • EPSS 0.16%
  • Published 02.08.2023 16:15:10
  • Last modified 21.11.2024 08:13:31

An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending undisclosed requests.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.