F5

Big-ip Access Policy Manager

623 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
2.3

CVE-2014-4027

  • EPSS 0.65%
  • Veröffentlicht 23.06.2014 11:21:18
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveragin...

4.3

CVE-2014-3959

  • EPSS 1.55%
  • Veröffentlicht 03.06.2014 14:55:11
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Cross-site scripting (XSS) vulnerability in list.jsp in the Configuration utility in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, GTM, and Link Controller 11.2.1 through 11.5.1, AAM 11.4.0 through 11.5.1 PEM 11.3.0 through 11.5.1, PSM 11.2.1 through 11.4...

7.1

CVE-2014-2928

Exploit
  • EPSS 39.05%
  • Veröffentlicht 12.05.2014 14:55:06
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The iControl API in F5 BIG-IP LTM, APM, ASM, GTM, Link Controller, and PSM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, BIG-IP AAM 11.4.0 through 11.5.1, BIG-IP AFM and PEM 11.3.0 through 11.5.1, BIG-IP Analytics 11.0.0 through 11.5.1, BIG-IP Edg...

6.9

CVE-2014-0196

Warnung Exploit
  • EPSS 22.48%
  • Veröffentlicht 07.05.2014 10:55:04
  • Zuletzt bearbeitet 21.04.2026 20:07:27

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or ...

7.8

CVE-2014-0101

  • EPSS 7.05%
  • Veröffentlicht 11.03.2014 13:01:06
  • Zuletzt bearbeitet 06.05.2026 22:30:45

The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which allows remote attackers to cause a denial of...

4.4

CVE-2013-6024

  • EPSS 0.36%
  • Veröffentlicht 10.02.2014 18:15:10
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Edge Client components in F5 BIG-IP APM 10.x, 11.x, 12.x, 13.x, and 14.x, BIG-IP Edge Gateway 10.x and 11.x, and FirePass 7.0.0 allow attackers to obtain sensitive information from process memory via unspecified vectors.

7.5

CVE-2012-3000

  • EPSS 1.64%
  • Veröffentlicht 30.01.2014 15:06:21
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Multiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM WebGUI in F5 BIG-IP LTM, GTM, ASM, Link Controller, PSM, APM, Edge Gateway, and Analytics and (2) AVR WebGUI in WebAccelerator and WOM 11.2.x before 11.2....

7.8

CVE-2013-6016

  • EPSS 2.75%
  • Veröffentlicht 26.10.2013 17:55:03
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, APM, ASM, Edge Gateway, GTM, Link Controller, and WOM 10.0.0 through 10.2.2 and 11.0.0; Analytics 11.0.0; PSM 9.4.0 through 9.4.8, 10.0.0 through 10.2.4, and 11.0.0 through 11.4.1; and WebAcc...

4.3

CVE-2013-5975

  • EPSS 1.8%
  • Veröffentlicht 01.10.2013 20:55:34
  • Zuletzt bearbeitet 29.04.2026 01:13:23

The access policy logon page (logon.inc) in F5 BIG-IP APM 11.1.0 through 11.2.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors.

4.3

CVE-2013-5976

  • EPSS 1.81%
  • Veröffentlicht 01.10.2013 20:55:34
  • Zuletzt bearbeitet 29.04.2026 01:13:23

Cross-site scripting (XSS) vulnerability in the access policy logout page (logout.inc) in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.1.0 through 11.3.0 allows remote attackers to inject arbitrary web script or HTML via the LastMRH_Session cookie.