F5

Big-ip Advanced Firewall Manager

470 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2018-15327

  • EPSS 0.28%
  • Published 31.10.2018 14:29:00
  • Last modified 21.11.2024 03:50:34

In BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1 or Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allo...

6.1

CVE-2018-15312

  • EPSS 0.26%
  • Published 19.10.2018 13:29:00
  • Last modified 21.11.2024 03:50:32

On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, a reflected Cross-Site Scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an authenticated user to execute JavaScript for the currently logged-...

6.1

CVE-2018-15313

  • EPSS 0.39%
  • Published 19.10.2018 13:29:00
  • Last modified 21.11.2024 03:50:32

On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page.

6.1

CVE-2018-15314

  • EPSS 0.39%
  • Published 19.10.2018 13:29:00
  • Last modified 21.11.2024 03:50:32

On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page.

6.1

CVE-2018-15315

  • EPSS 0.26%
  • Published 19.10.2018 13:29:00
  • Last modified 21.11.2024 03:50:32

On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a reflected Cross Site Scripting (XSS) vulnerability in an undisclosed Configuration Utility page.

5.9

CVE-2018-15311

  • EPSS 3.53%
  • Published 10.10.2018 14:29:00
  • Last modified 21.11.2024 03:50:31

When F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing specially crafted TCP traffic with the Large Receive Offload (LRO) feature enabled, TMM may crash, leading to a failover event. This vulnerability is not...

7.5

CVE-2016-7475

  • EPSS 0.65%
  • Published 08.10.2018 19:29:00
  • Last modified 21.11.2024 02:58:04

Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the Traffic Management Microkernel (TMM) may not properly clean-up pool member network connections when using SPDY or HTTP/2 virtual server profiles.

7.8

CVE-2018-5391

  • EPSS 3.82%
  • Published 06.09.2018 21:29:00
  • Last modified 21.11.2024 04:08:43

The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments...

7.8

CVE-2018-5390

  • EPSS 3.92%
  • Published 06.08.2018 20:29:01
  • Last modified 21.11.2024 04:08:43

Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

7.5

CVE-2018-5530

  • EPSS 0.75%
  • Published 25.07.2018 14:29:00
  • Last modified 21.11.2024 04:09:00

F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.1 virtual servers with HTTP/2 profiles enabled are vulnerable to "HPACK Bomb".