F5 Networks, Inc. Big-Ip (Apm)
11 CVEs affecting F5 Networks, Inc. Big-Ip (Apm). Latest disclosed: 2019-03-13. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-6596 | High | 7.5 | 2019-03-13 | In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, 12.1.0-12.1.3.6, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when processing fragmented ClientHello messages in a DTLS sessi… |
CVE-2018-15326 | High | 7.5 | 2018-10-31 | In some situations on BIG-IP APM 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.2, the CRLDP Auth access policy agent may treat revoked ce… |
CVE-2018-5544 | High | 7.5 | 2018-07-31 | When the F5 BIG-IP APM 13.0.0-13.1.1 or 12.1.0-12.1.3 renders certain pages (pages with a logon agent or a confirm box), the BIG-IP APM may disclose configurat… |
CVE-2018-5536 | High | 7.5 | 2018-07-25 | A remote attacker via undisclosed measures, may be able to exploit an F5 BIG-IP APM 13.0.0-13.1.0.7 or 12.1.0-12.1.3.5 virtual server configured with an APM pe… |
CVE-2019-6595 | Medium | 6.1 | 2019-02-26 | Cross-site scripting (XSS) vulnerability in F5 BIG-IP Access Policy Manager (APM) 11.5.x and 11.6.x Admin Web UI. |
CVE-2018-15335 | Medium | 5.9 | 2018-12-28 | When APM 13.0.0-13.1.x is deployed as an OAuth Resource Server, APM becomes a client application to an external OAuth authorization server. In certain cases wh… |
CVE-2018-15324 | Medium | 5.9 | 2018-10-31 | On BIG-IP APM 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, TMM may restart when processing a specially crafted request with APM portal access. |
CVE-2018-15316 | Medium | 5.5 | 2018-10-19 | In F5 BIG-IP APM 13.0.0-13.1.1.1, APM Client 7.1.5-7.1.6, and/or Edge Client 7101-7160, the BIG-IP APM Edge Client component loads the policy library with user… |
CVE-2019-6591 | Medium | 5.4 | 2019-02-05 | On BIG-IP APM 14.0.0 to 14.0.0.4, 13.0.0 to 13.1.1.3 and 12.1.0 to 12.1.3.7, a reflected cross-site scripting (XSS) vulnerability exists in the resource inform… |
CVE-2018-5528 | Medium | 5.3 | 2018-06-27 | Under certain conditions, TMM may restart and produce a core file while processing APM data on BIG-IP 13.0.1 or 13.1.0.4-13.1.0.7. |
CVE-2018-15334 | Medium | 4.3 | 2018-12-28 | A cross-site request forgery (CSRF) vulnerability in the APM webtop 11.2.1 or greater may allow attacker to force an APM webtop session to log out and require… |