F5

Big-ip Application Security Manager

492 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.9

CVE-2021-22987

  • EPSS 1.77%
  • Veröffentlicht 31.03.2021 17:15:12
  • Zuletzt bearbeitet 21.11.2024 05:51:04

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3 when running in Appliance mode, the Traffic Management User Interface (TMUI), also ref...

9.1

CVE-2021-22989

  • EPSS 1.37%
  • Veröffentlicht 31.03.2021 17:15:12
  • Zuletzt bearbeitet 21.11.2024 05:51:04

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, when running in Appliance mode with Advanced WAF or BIG-IP ASM provisioned, the TMUI,...

9

CVE-2021-22990

  • EPSS 1.84%
  • Veröffentlicht 31.03.2021 17:15:12
  • Zuletzt bearbeitet 21.11.2024 05:51:04

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, on systems with Advanced WAF or BIG-IP ASM provisioned, the Traffic Management User I...

10

CVE-2021-22986

Warnung Exploit
  • EPSS 94.47%
  • Veröffentlicht 31.03.2021 15:15:15
  • Zuletzt bearbeitet 02.04.2025 19:09:11

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd BIG-IQ 7.1.0.x before 7.1.0.3 and 7.0.0.x before 7.0.0.2, the iControl REST interface has an unauthenticat...

9

CVE-2021-22988

  • EPSS 2.38%
  • Veröffentlicht 31.03.2021 15:15:15
  • Zuletzt bearbeitet 21.11.2024 05:51:04

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, TMUI, also referred to as the Configuration utility, has an authenticated remote comm...

7.5

CVE-2021-22977

  • EPSS 0.65%
  • Veröffentlicht 12.02.2021 20:15:13
  • Zuletzt bearbeitet 21.11.2024 05:51:03

On BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3, cooperation between malicious HTTP client code and a malicious server may cause TMM to restart and generate a core file. Note: Software versions which have reached End of Software Development (EoSD...

8.3

CVE-2021-22978

  • EPSS 0.82%
  • Veröffentlicht 12.02.2021 20:15:13
  • Zuletzt bearbeitet 21.11.2024 05:51:03

On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12.1.x and 11.6.x versions, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete ...

6.1

CVE-2021-22984

  • EPSS 0.2%
  • Veröffentlicht 12.02.2021 20:15:13
  • Zuletzt bearbeitet 21.11.2024 05:51:04

On BIG-IP Advanced WAF and ASM version 15.1.x before 15.1.0.2, 15.0.x before 15.0.1.4, 14.1.x before 14.1.2.5, 13.1.x before 13.1.3.4, 12.1.x before 12.1.5.2, and 11.6.x before 11.6.5.2, when receiving a unauthenticated client request with a maliciou...

7.5

CVE-2021-22976

  • EPSS 0.65%
  • Veröffentlicht 12.02.2021 18:15:12
  • Zuletzt bearbeitet 21.11.2024 05:51:03

On BIG-IP Advanced WAF and ASM version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, and all 12.1.x versions, when the BIG-IP ASM system processes WebSocket requests with JSON payloads, an unusually lar...

6.1

CVE-2021-22979

  • EPSS 0.32%
  • Veröffentlicht 12.02.2021 18:15:12
  • Zuletzt bearbeitet 21.11.2024 05:51:03

On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.2.8, 13.1.x before 13.1.3.5, and all 12.1.x versions, a reflected Cross-Site Scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration util...