f5-waf-quick-patch-cve-2021-44228

f5-waf-quick-patch-CVE-2021-44228 F5 Networks Advanced WAF/ASM Quick Patch CVE 2021-44228. Overview This tool connects to a BIG-IP device and creates a custom signature set called CVE-2021-4428 and apply it to all policies in blocking mode. It also enforces all signatures and apply the changes...

PT-2025-42372

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Advanced WAF versions affected versions not specified F5 BIG-IP ASM versions affected versions not specified Description A configuration issue in F5 BIG-IP Advanced WAF or ASM security policies on a virtual server can lead to the...

EUVD-2018-17310

Malware in sbrugna...

EUVD-2016-8325

Malware in sbrugna...

EUVD-2019-16209

Malware in sbrugna...

EUVD-2018-17308

Malware in sbrugna...

K8106: OpenSSL SSL_get_shared_ciphers vulnerability CVE-2007-5135

Security Advisory Description Note : For information about signing up to receive security notice updates from F5, refer to K9970: Subscribe to email notifications regarding F5 products and security announcements. Note : Versions that are not listed in this article have not been evaluated for...

CVE-2022-27806

On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration GC all versions prior to 9.0, when running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance...

PT-2022-18126

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Advanced WAF, ASM, and APM versions prior to 16.1.2.1 F5 BIG-IP Advanced WAF, ASM, and APM versions 15.1.x prior to 15.1.5 F5 BIG-IP Advanced WAF, ASM, and APM versions 14.1.x prior to 14.1.4.6 F5 BIG-IP Advanced WAF, ASM, and APM...

PT-2021-15353

Name of the Vulnerable Software and Affected Versions F5 BIG-IP ASM versions 13.1.x through 13.1.4 F5 BIG-IP ASM versions 14.1.x through 14.1.4.2 F5 BIG-IP ASM versions 15.1.x through 15.1.3.1 F5 BIG-IP ASM versions 16.0.x through 16.0.1.2 Description When JSON content profiles are configured for...

F5 BIG-IP ASM 资源管理错误漏洞

F5 BIG-IP ASM is a Web Application Firewall WAF from F5 USA that provides secure remote access, protects email, and simplifies Web access control while enhancing network and application performance. A denial of service vulnerability exists in F5 BIG-IP ASM, which can be exploited by an attacker t...

PT-2020-18780

Name of the Vulnerable Software and Affected Versions F5 BIG-IP ASM versions 11.6.1 through 11.6.5.1 Description The issue occurs when the BIG-IP system sends data plane traffic to back-end servers unencrypted, even when a Server SSL profile is applied, under certain configurations. Recommendatio...

PT-2019-18264

Name of the Vulnerable Software and Affected Versions F5 BIG-IP ASM versions 11.5.2 through 11.6.5.1 F5 BIG-IP ASM versions 12.1.0 through 12.1.5 F5 BIG-IP ASM versions 13.1.0 through 13.1.3.1 F5 BIG-IP ASM versions 14.0.0 through 14.1.2.2 F5 BIG-IP ASM versions 15.0.0 through 15.0.1.1 Descriptio...

CVE-2019-6650

F5 BIG-IP ASM 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 may expose sensitive information and allow the system configuration to be modified when using non-default settings...

Default configuration

F5 BIG-IP ASM 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 may expose sensitive information and allow the system configuration to be modified when using non-default settings...

CVE-2019-6650

F5 BIG-IP ASM 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 may expose sensitive information and allow the system configuration to be modified when using non-default settings...

CVE-2019-6650: Undefined Security Weakness

F5 BIG-IP ASM 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 may expose sensitive information and allow the system configuration to be modified when using non-default settings...

PT-2019-18189

Name of the Vulnerable Software and Affected Versions F5 BIG-IP ASM versions 11.5.1 through 11.5.8 F5 BIG-IP ASM versions 11.6.1 through 11.6.3 F5 BIG-IP ASM versions 12.1.0 through 12.1.3 F5 BIG-IP ASM versions 13.0.0 through 13.1.1.3 F5 BIG-IP ASM versions 14.0.0 through 14.0.0.2 Description Th...

CVE-2018-5539

The CVE affects F5 BIG-IP ASM. Conditions when processing CSRF protections may cause the bd process to restart and write a core file, leaving the ASM unable to process traffic. Affected versions include 13.0.0–13.1.0.7, 12.1.0–12.1.3.5, 11.6.0–11.6.3.1, 11.5.1–11.5.6, and 11.2.1. Remediation per ...

PT-2018-17033

Name of the Vulnerable Software and Affected Versions F5 BIG-IP ASM versions 11.2.1 F5 BIG-IP ASM versions 11.5.1 through 11.5.6 F5 BIG-IP ASM versions 11.6.0 through 11.6.3.1 F5 BIG-IP ASM versions 12.1.0 through 12.1.3.5 F5 BIG-IP ASM versions 13.0.0 through 13.1.0.7 Description The issue occur...