F5

Big-ip Access Policy Manager

538 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2020-5924

  • EPSS 0.53%
  • Published 26.08.2020 15:15:13
  • Last modified 21.11.2024 05:34:50

In BIG-IP APM versions 12.1.0-12.1.5.1 and 11.6.1-11.6.5.2, RADIUS authentication leaks memory when the username for authentication is not set.

7.1

CVE-2020-5912

  • EPSS 0.08%
  • Published 26.08.2020 15:15:12
  • Last modified 21.11.2024 05:34:48

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the restjavad process's dump command does not follow current best coding practices and may overwrite arbitrary files.

10

CVE-2020-5902

Warning Exploit
  • EPSS 94.43%
  • Published 01.07.2020 15:15:15
  • Last modified 02.04.2025 18:28:41

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability i...

6.1

CVE-2020-5903

  • EPSS 9.08%
  • Published 01.07.2020 15:15:15
  • Last modified 21.11.2024 05:34:47

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, a Cross-Site Scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility.

8.8

CVE-2020-5904

  • EPSS 0.28%
  • Published 01.07.2020 15:15:15
  • Last modified 21.11.2024 05:34:48

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, a cross-site request forgery (CSRF) vulnerability in the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, exists in an undi...

6

CVE-2020-5905

  • EPSS 0.26%
  • Published 01.07.2020 15:15:15
  • Last modified 21.11.2024 05:34:48

In version 11.6.1-11.6.5.2 of the BIG-IP system Configuration utility Network > WCCP page, the system does not sanitize all user-provided data before display.

8.1

CVE-2020-5906

  • EPSS 0.13%
  • Published 01.07.2020 15:15:15
  • Last modified 21.11.2024 05:34:48

In versions 13.1.0-13.1.3.3, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, the BIG-IP system does not properly enforce the access controls for the scp.blacklist files. This allows Admin and Resource Admin users with Secure Copy (SCP) protocol access to read ...

7.2

CVE-2020-5907

  • EPSS 0.36%
  • Published 01.07.2020 15:15:15
  • Last modified 21.11.2024 05:34:48

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, an authorized user provided with access only to the TMOS Shell (tmsh) may be able to conduct arbitrary file read/writes via the built-in sftp ...

5.5

CVE-2020-5908

  • EPSS 0.09%
  • Published 01.07.2020 15:15:15
  • Last modified 21.11.2024 05:34:48

In versions bundled with BIG-IP APM 12.1.0-12.1.5 and 11.6.1-11.6.5.2, Edge Client for Linux exposes full session ID in the local log files.

7.8

CVE-2020-5896

  • EPSS 0.06%
  • Published 12.05.2020 16:15:11
  • Last modified 21.11.2024 05:34:47

On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions.