Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-0150
HistoryAug 09, 2013 - 8:56 p.m.

CVE-2013-0150

2013-08-0920:56:06
CWE-22
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.8%

JSON

Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products “when APM is provisioned,” allows remote attackers to upload and execute arbitrary files via a … (dot dot) in the filename parameter.

Affected configurations

NVD
Node
f5big-ip_access_policy_managerRange10.1.0–10.2.4
OR
f5big-ip_access_policy_managerRange11.0.0–11.3.0
OR
f5big-ip_advanced_firewall_managerMatch11.3.0
OR
f5big-ip_analyticsRange11.0.0–11.3.0
OR
f5big-ip_application_security_managerRange10.1.0–10.2.4
OR
f5big-ip_application_security_managerRange11.0.0–11.3.0
OR
f5big-ip_edge_gatewayRange10.1.0–10.2.4
OR
f5big-ip_edge_gatewayRange11.0.0–11.3.0
OR
f5big-ip_global_traffic_managerRange10.1.0–10.2.4
OR
f5big-ip_global_traffic_managerRange11.0.0–11.3.0
OR
f5big-ip_link_controllerRange10.1.0–10.2.4
OR
f5big-ip_link_controllerRange11.0.0–11.3.0
OR
f5big-ip_local_traffic_managerRange10.1.0–10.2.4
OR
f5big-ip_local_traffic_managerRange11.0.0–11.3.0
OR
f5big-ip_policy_enforcement_managerMatch11.3.0
OR
f5big-ip_protocol_security_moduleRange10.1.0–10.2.4
OR
f5big-ip_protocol_security_moduleRange11.0.0–11.3.0
OR
f5big-ip_wan_optimization_managerRange10.1.0–10.2.4
OR
f5big-ip_wan_optimization_managerRange11.0.0–11.3.0
OR
f5big-ip_webacceleratorRange10.1.0–10.2.4
OR
f5big-ip_webacceleratorRange11.0.0–11.3.0
OR
f5firepassRange6.0.0–6.1.0
OR
f5firepassMatch7.0.0

Related

nessus 1
prion 1
f5 2
cvelist 1
cve 1
nessus
nessus
F5 Networks BIG-IP : Client-side component flaw (SOL14468)
2014-10-10 00:00:00
prion
prion
Directory traversal
2013-08-09 20:56:00
f5
f5
K14468 : Client-side component flaw CVE-2013-0150
2013-06-26 00:00:00
SOL14468 - Client-side component flaw CVE-2013-0150
2013-06-26 00:00:00
cvelist
cvelist
CVE-2013-0150
2022-10-03 16:15:04
cve
cve
CVE-2013-0150
2022-10-03 16:15:04

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.8%

JSON
Related for NVD:CVE-2013-0150
nessus1prion1f52cvelist1cve1