F5

Big-ip Application Security Manager

492 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.4

CVE-2019-6635

  • EPSS 0.13%
  • Published 03.07.2019 19:15:13
  • Last modified 21.11.2024 04:46:51

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.1-11.5.8, when the BIG-IP system is licensed for Appliance mode, a user with either the Administrator or the Resource Administrator role can bypass ...

8.5

CVE-2019-6636

  • EPSS 0.23%
  • Published 03.07.2019 19:15:13
  • Last modified 21.11.2024 04:46:51

On BIG-IP (AFM, ASM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.4, a stored cross-site scripting vulnerability in AFM feed list. In the worst case, an attacker can store a CSRF which results in code execution as...

6.5

CVE-2019-6637

  • EPSS 0.34%
  • Published 03.07.2019 19:15:13
  • Last modified 21.11.2024 04:46:51

On BIG-IP (ASM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, Application logic abuse of ASM REST endpoints can lead to instability of BIG-IP system. Exploitation of this issue causes excessive memory consumption which results...

6.5

CVE-2019-6638

  • EPSS 0.48%
  • Published 03.07.2019 19:15:13
  • Last modified 21.11.2024 04:46:51

On BIG-IP 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, Malformed http requests made to an undisclosed iControl REST endpoint can lead to infinite loop of the restjavad process.

5.3

CVE-2019-6640

  • EPSS 0.13%
  • Published 03.07.2019 19:15:13
  • Last modified 21.11.2024 04:46:51

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.1-11.5.8, SNMP exposes sensitive configuration objects over insecure transmission channels. This issue is exposed when a passphrase is inserted into...

6.5

CVE-2019-6641

  • EPSS 0.63%
  • Published 03.07.2019 19:15:13
  • Last modified 21.11.2024 04:46:51

On BIG-IP 12.1.0-12.1.4.1, undisclosed requests can cause iControl REST processes to crash. The attack can only come from an authenticated user; all roles are capable of performing the attack. Unauthenticated users cannot perform this attack.

5.5

CVE-2019-6632

  • EPSS 0.11%
  • Published 03.07.2019 19:15:12
  • Last modified 21.11.2024 04:46:50

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, under certain circumstances, attackers can decrypt configuration items that are encrypted because the vCMP configuration unit key is generated with insufficient randomnes...

4.4

CVE-2019-6633

  • EPSS 0.12%
  • Published 03.07.2019 18:15:11
  • Last modified 21.11.2024 04:46:50

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, and 11.5.1-11.6.4, when the BIG-IP system is licensed with Appliance mode, user accounts with Administrator and Resource Administrator roles can bypass Appliance mode restr...

6.1

CVE-2019-6625

  • EPSS 0.35%
  • Published 03.07.2019 18:15:10
  • Last modified 21.11.2024 04:46:49

On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.4, a reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface (TMUI) also known as the...

6.1

CVE-2019-6626

  • EPSS 0.35%
  • Published 03.07.2019 18:15:10
  • Last modified 21.11.2024 04:46:50

On BIG-IP (AFM, Analytics, ASM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.3.4, A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface ...