CVE-2017-13985

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to traverse directory leading to disclosure of information...

CVE-2017-13984

The CVE-2017-13984 issue affects Hewlett Packard Enterprise’s BSM Platform Application Performance Management System Health (HPE BSM Health) with versions 9.26, 9.30 and 9.40. The vulnerability resides in the SHExportToExcel servlet, where a directory-traversal flaw allows remote attackers to del...

CVE-2017-13983

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to bypass authentication...

CVE-2017-13983

CVE-2017-13983 describes an authentication bypass vulnerability in the HPE BSM Platform Application Performance Management System Health (Health) suite, affecting versions 9.26, 9.30 and 9.40. The flaw enables remote attackers to bypass authentication, with the ZDI advisory noting the System Heal...

CVE-2017-13984

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to delete arbitrary files via servlet directory traversal...

apm-telescopes.de XSS vulnerability

Vulnerable URL: http://www.apm-telescopes.de/de/customer.html?pageaction=passwordreset?key=%22/%3E%27%3E%22%3EI%3Ci%3EI%3Csvg/onload%3Dalert/openbugbounty/%3E〈=de=false=20=0=0 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

PHP vulnerabilities CVE-2017-9226 and CVE-2017-7890

F5 Product Development has evaluated the currently supported releases for potential vulnerability. To determine if your release is known to be vulnerable, the components or features that are affected by the vulnerability, and for information about releases or hotfixes that address the...

Cross site scripting

A stored cross-site scripting XSS vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WOM and WebSafe version 12.0.0 - 12.1.2, 11.4.0 - 11.6.1, and 11.2.1 allows an...

F5 BIG-IP - TMM vulnerability CVE-2016-9257

F5 BIG-IP APM 12.0.0 through 12.1.2 is vulnerable to Cross Site Scripting XSS injection due to rendering of not escaped/not encoded content of session variables in Access Reports. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...

F5 BIG-IP APM Remote Denial of Service Vulnerability

The F5 BIG-IP is a load balancer that uses a variety of distribution algorithms to distribute network requests to available servers in a server cluster, enabling network visitors to have the best possible networking experience by managing incoming Web data traffic and increasing effective network...

CVE-2017-0302

In F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established access session to the BIG-IP APM system may be able to cause a traffic disruption if the length of the requested URL is less than 16 characters...

CVE-2017-0302

In F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established access session to the BIG-IP APM system may be able to cause a traffic disruption if the length of the requested URL is less than 16 characters...

CVE-2016-9257

In F5 BIG-IP APM 12.0.0 through 12.1.2, non-authenticated users may be able to inject JavaScript into a request that will then be rendered and executed in the context of the Administrative user when the Administrative user is viewing the Access System Logs, allowing the non-authenticated user to...

Cross site scripting

In F5 BIG-IP APM 12.0.0 through 12.1.2, non-authenticated users may be able to inject JavaScript into a request that will then be rendered and executed in the context of the Administrative user when the Administrative user is viewing the Access System Logs, allowing the non-authenticated user to...

Code injection

In F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established access session to the BIG-IP APM system may be able to cause a traffic disruption if the length of the requested URL is less than 16 characters...

CVE-2017-0302

In F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established access session to the BIG-IP APM system may be able to cause a traffic disruption if the length of the requested URL is less than 16 characters...

CVE-2016-9257

F5 BIG-IP APM 12.0.0–12.1.2 are vulnerable to Cross-Site Scripting (XSS) due to rendering of not escaped content from session variables in Access Reports. The vulnerability can be exploited by a non-authenticated user to inject JavaScript that runs in the context of an Administrative user when vi...

CVE-2017-0302

Summary: CVE-2017-0302 affects F5 BIG-IP APM; an authenticated user with a valid session can cause a traffic disruption when the requested URL length is under 16 characters. Affected versions (per vendor advisory): BIG-IP APM 12.0.0–12.1.2 and 13.0.0. Root cause / vulnerability: Insufficient boun...

F5 Networks BIG-IP : TMM vulnerability (K82851041)

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2, undisclosed traffic patterns received while software SYN cookie protection is engaged may cause a disrupti...

F5 Networks BIG-IP : BIG-IP APM redirect vulnerability (K87141725)

Insufficient boundary checks on the request URL may cause the tmm process to assert when the user is redirected back to the original request URL following successful authentication to the BIG-IP APM system. CVE-2017-0302 Impact An authenticated user with an established access session to the BIG-I...