F5

Big-ip Advanced Web Application Firewall

109 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2021-23027

  • EPSS 0.39%
  • Veröffentlicht 14.09.2021 22:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:10

On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, and 14.1.x before 14.1.4.3, a DOM based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScrip...

8.8

CVE-2021-23025

  • EPSS 1.12%
  • Veröffentlicht 14.09.2021 21:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:10

On version 15.1.x before 15.1.0.5, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all versions of 12.1.x and 11.6.x, an authenticated remote command execution vulnerability exists in the BIG-IP Configuration utility. Note: Software versions whic...

7.5

CVE-2021-23028

  • EPSS 0.61%
  • Veröffentlicht 14.09.2021 21:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:10

On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, and 13.1.x before 13.1.4, when JSON content profiles are configured for URLs as part of an F5 Advanced Web Application Firewall (WAF)/BIG-IP ASM security policy and ap...

7.5

CVE-2021-23030

  • EPSS 0.68%
  • Veröffentlicht 14.09.2021 21:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:11

On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests...

9.9

CVE-2021-23031

  • EPSS 0.5%
  • Veröffentlicht 14.09.2021 19:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:11

On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, an authenticated user may perform a privilege escalation on the BIG-IP Advanced WAF and ASM Confi...

7.5

CVE-2021-23036

  • EPSS 0.61%
  • Veröffentlicht 14.09.2021 19:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:11

On version 16.0.x before 16.0.1.2, when a BIG-IP ASM and DataSafe profile are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Tech...

7.5

CVE-2021-23033

  • EPSS 0.65%
  • Veröffentlicht 14.09.2021 18:15:08
  • Zuletzt bearbeitet 21.11.2024 05:51:11

On BIG-IP Advanced WAF and BIG-IP ASM version 16.x before 16.1.0x, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests ca...

7.5

CVE-2021-23045

  • EPSS 0.65%
  • Veröffentlicht 14.09.2021 17:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:12

On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when an SCTP profile with multiple paths is configured on a virtual server, undisclosed requests can cause t...

7.5

CVE-2021-23042

  • EPSS 0.65%
  • Veröffentlicht 14.09.2021 15:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:12

On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, and 12.1.x before 12.1.6, when an HTTP profile is configured on a virtual server, undisclosed requests can cause a significant increase in sys...

6.1

CVE-2021-23041

  • EPSS 0.41%
  • Veröffentlicht 14.09.2021 14:15:10
  • Zuletzt bearbeitet 21.11.2024 05:51:12

On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x, a DOM based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration...