CVE-2013-6016

CVE-2013-6016 affects the Traffic Management Microkernel (TMM) in multiple BIG-IP components. The issue may cause a TCP connection to transition to ESTABLISHED before the ACK, allowing remote attackers to trigger a denial of service (SIGFPE or assertion failure) and TMM restart. Affected products...

CVE-2013-6016: Improper Input Validation

The Traffic Management Microkernel TMM in F5 BIG-IP LTM, APM, ASM, Edge Gateway, GTM, Link Controller, and WOM 10.0.0 through 10.2.2 and 11.0.0; Analytics 11.0.0; PSM 9.4.0 through 9.4.8, 10.0.0 through 10.2.4, and 11.0.0 through 11.4.1; and WebAccelerator 9.4.0 through 9.4.8, 10.0.0 through...

PT-2013-5924

Name of the Vulnerable Software and Affected Versions F5 BIG-IP LTM versions 10.0.0 through 10.2.2 and 11.0.0 F5 BIG-IP APM versions 10.0.0 through 10.2.2 and 11.0.0 F5 BIG-IP ASM versions 10.0.0 through 10.2.2 and 11.0.0 F5 BIG-IP Edge Gateway versions 10.0.0 through 10.2.2 and 11.0.0 F5 BIG-IP...

SOL14741 - OpenSSH vulnerability CVE-2010-5107

Vulnerability Recommended Actions If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in the Versions known to be not vulnerable column. If the table lists only an older version than what you are...

CVE-2013-5975

The access policy logon page logon.inc in F5 BIG-IP APM 11.1.0 through 11.2.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2013-5976

Cross-site scripting XSS vulnerability in the access policy logout page logout.inc in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.1.0 through 11.3.0 allows remote attackers to inject arbitrary web script or HTML via the LastMRHSession cookie...

Cross site scripting

Cross-site scripting XSS vulnerability in the access policy logout page logout.inc in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.1.0 through 11.3.0 allows remote attackers to inject arbitrary web script or HTML via the LastMRHSession cookie...

Code injection

The access policy logon page logon.inc in F5 BIG-IP APM 11.1.0 through 11.2.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2013-5975

The access policy logon page logon.inc in F5 BIG-IP APM 11.1.0 through 11.2.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2013-5976

Cross-site scripting XSS vulnerability in the access policy logout page logout.inc in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.1.0 through 11.3.0 allows remote attackers to inject arbitrary web script or HTML via the LastMRHSession cookie...

CVE-2013-5975

The CVE-2013-5975 issue concerns the Access Policy Manager logon.inc page in F5 BIG-IP APM, where 11.1.0–11.2.1 are vulnerable to clickjacking via unspecified vectors. The associated advisory (K14700) confirms vulnerable APM 11.1.0–11.2.1 and notes that the vulnerability was addressed in BIG-IP A...

CVE-2013-5976

The CVE-2013-5976 XSS vulnerability affects F5 BIG-IP APM: the access policy logout page (logout.inc) accepts the LastMRH_Session cookie to inject arbitrary script/HTML. Affected versions: BIG-IP APM 10.1.0–10.2.4 and 11.1.0–11.3.0. The security advisory (K14712) notes the vulnerability in the lo...

PT-2013-5898

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM versions 10.1.0 through 10.2.4 F5 BIG-IP APM versions 11.1.0 through 11.3.0 Description A cross-site scripting XSS issue exists in the access policy logout page, specifically in the logout.inc file. This allows remote attackers t...

PT-2013-5897

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM versions 11.1.0 through 11.2.1 Description The issue allows remote attackers to conduct clickjacking attacks via unspecified vectors on the access policy logon page, specifically affecting the logon.inc file. Recommendations For...

CVE-2013-5975: Undefined Security Weakness

The access policy logon page logon.inc in F5 BIG-IP APM 11.1.0 through 11.2.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2013-5976: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the access policy logout page logout.inc in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.1.0 through 11.3.0 allows remote attackers to inject arbitrary web script or HTML via the LastMRHSession cookie...

SOL14712 - The BIG-IP APM access policy logout page may be vulnerable to XSS cookie tampering

Recommended action To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column in the previous table. To mitigate this vulnerability, you can modify the logout web page to null the specific code identified at issue. To do so, perform the...

CVE-2013-0150

Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products "when APM is provisioned," allows remote attackers to upload and execut...

Directory traversal

Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products "when APM is provisioned," allows remote attackers to upload and execut...

CVE-2013-0150

Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products "when APM is provisioned," allows remote attackers to upload and execut...