F5

Big-ip Application Security Manager

540 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2021-23030

  • EPSS 0.68%
  • Veröffentlicht 14.09.2021 21:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:11

On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests...

9.9

CVE-2021-23031

  • EPSS 0.5%
  • Veröffentlicht 14.09.2021 19:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:11

On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, an authenticated user may perform a privilege escalation on the BIG-IP Advanced WAF and ASM Confi...

7.5

CVE-2021-23036

  • EPSS 0.61%
  • Veröffentlicht 14.09.2021 19:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:11

On version 16.0.x before 16.0.1.2, when a BIG-IP ASM and DataSafe profile are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Tech...

7.5

CVE-2021-23033

  • EPSS 0.65%
  • Veröffentlicht 14.09.2021 18:15:08
  • Zuletzt bearbeitet 21.11.2024 05:51:11

On BIG-IP Advanced WAF and BIG-IP ASM version 16.x before 16.1.0x, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a WebSocket profile is configured on a virtual server, undisclosed requests ca...

7.5

CVE-2021-23034

  • EPSS 0.92%
  • Veröffentlicht 14.09.2021 18:15:08
  • Zuletzt bearbeitet 21.11.2024 05:51:11

On BIG-IP version 16.x before 16.1.0 and 15.1.x before 15.1.3.1, when a DNS profile using a DNS cache resolver is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) process to terminate. Note: Soft...

7.5

CVE-2021-23035

  • EPSS 0.86%
  • Veröffentlicht 14.09.2021 18:15:08
  • Zuletzt bearbeitet 21.11.2024 05:51:11

On BIG-IP 14.1.x before 14.1.4.4, when an HTTP profile is configured on a virtual server, after a specific sequence of packets, chunked responses can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reac...

9.6

CVE-2021-23037

  • EPSS 0.71%
  • Veröffentlicht 14.09.2021 18:15:08
  • Zuletzt bearbeitet 21.11.2024 05:51:11

On all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the...

9

CVE-2021-23038

  • EPSS 0.33%
  • Veröffentlicht 14.09.2021 18:15:08
  • Zuletzt bearbeitet 21.11.2024 05:51:11

On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x, a stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility...

7.5

CVE-2021-23039

  • EPSS 0.57%
  • Veröffentlicht 14.09.2021 18:15:08
  • Zuletzt bearbeitet 21.11.2024 05:51:12

On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.2.8, and all versions of 13.1.x and 12.1.x, when IPSec is configured on a BIG-IP system, undisclosed requests from an authorized remote (IPSec) peer, which already has a nego...

7.5

CVE-2021-23045

  • EPSS 0.65%
  • Veröffentlicht 14.09.2021 17:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:12

On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when an SCTP profile with multiple paths is configured on a virtual server, undisclosed requests can cause t...