F5 Networks BIG-IP : BIG-IP APM VPN vulnerability (K71891773)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.3.6 / 14.1.4 / 15.1.2.1 / 16.0.1.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K71891773 advisory. - When using BIG-IP APM 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before...

Update for IDOR vulnerability in System Center Operations Manager (KB5006871)

Update for IDOR vulnerability in System Center Operations Manager KB5006871 Applies to: System Center 2019 Operations Manager, System Center 2016 Operations Manager, System Center 2012 R2 Operations Manager Introduction This article describes an issue that is fixed for System Center Operations...

CVE-2021-23054

On version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting XSS vulnerability exists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system...

CVE-2021-23054

On version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting XSS vulnerability exists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system...

CVE-2021-23054

CVE-2021-23054 : A reflected XSS vulnerability exists in the resource information page for authenticated users when a full webtop is configured on BIG-IP APM. Affected: BIG-IP APM across multiple branches (16.x before 16.1.0; 15.x before 15.1.4; 14.x before 14.1.4.4; and all 13.1.x, 12.1.x, 11.6....

F5 Networks BIG-IP : BIG-IP APM XSS vulnerability (K41997459)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.4.4 / 15.1.4 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K41997459 advisory. - On version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x,...

F5 BIG-IP APM 跨站脚本漏洞

F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. The BIG-IP APM system has a security vulnerability that allows an attacker to create a malicious URL and send it to an authenticated user in...

CVE-2021-23047

On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, and all versions of 13.1.x, 12.1.x and 11.6.x, when BIG-IP APM performs Online Certificate Status Protocol OCSP verification of a certificate that contains Authority Information Access AIA, undisclosed requests may cau...

CVE-2021-23047

On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, and all versions of 13.1.x, 12.1.x and 11.6.x, when BIG-IP APM performs Online Certificate Status Protocol OCSP verification of a certificate that contains Authority Information Access AIA, undisclosed requests may cau...

CVE-2021-23047

CVE-2021-23047 affects BIG-IP APM OCSP verification when the certificate contains AIA, causing undisclosed OCSP requests to increase memory usage (potential DoS). Public docs confirm affected product/component and root cause. Remediation per F5 advisory (K79428827): upgrade to fixed releases by b...

CVE-2021-23052

On version 14.1.x before 14.1.4.4 and all versions of 13.1.x, an open redirect vulnerability exists on virtual servers enabled with a BIG-IP APM access policy. This vulnerability allows an unauthenticated malicious user to build an open redirect URI. Note: Software versions which have reached End...

Open redirect

On version 14.1.x before 14.1.4.4 and all versions of 13.1.x, an open redirect vulnerability exists on virtual servers enabled with a BIG-IP APM access policy. This vulnerability allows an unauthenticated malicious user to build an open redirect URI. Note: Software versions which have reached End...

CVE-2021-23052

On version 14.1.x before 14.1.4.4 and all versions of 13.1.x, an open redirect vulnerability exists on virtual servers enabled with a BIG-IP APM access policy. This vulnerability allows an unauthenticated malicious user to build an open redirect URI. Note: Software versions which have reached End...

CVE-2021-23052

CVE-2021-23052 affects BIG-IP APM: open redirect vulnerability on virtual servers with APM policy in BIG-IP versions 14.1.x before 14.1.4.4 and all 13.1.x. Unauthenticated attackers can craft a redirect URI. Official advisories confirm vulnerable branches and provide fixes: upgrade 14.x to 14.1.4...

F5 BIG IP APM has an unspecified vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. F5 BIG IP APM has a security vulnerability that allows victims to be redirected to malicious websites after an attacker creat...

F5 Networks BIG-IP : BIG-IP APM OCSP vulnerability (K79428827)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.4.3 / 15.1.3.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K79428827 advisory. - On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, and all versions of...

F5 Networks BIG-IP : BIG-IP APM vulnerability (K32734107)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.4.4. It is, therefore, affected by a vulnerability as referenced in the K32734107 advisory. - On version 14.1.x before 14.1.4.4 and all versions of 13.1.x, an open redirect vulnerability exists on virtual servers...

F5 BIG-IP APM输入验证错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. F5 BIG IP APM has a security vulnerability that allows victims to be redirected to malicious websites after an attacker creat...

CVE-2021-27887

Cross-site Scripting XSS vulnerability in the main dashboard of Ellipse APM versions allows an authenticated user or integrated application to inject malicious data into the application that can then be executed in a victim’s browser. This issue affects: Hitachi ABB Power Grids Ellipse APM 5.3...

CVE-2021-27887

Cross-site Scripting XSS vulnerability in the main dashboard of Ellipse APM versions allows an authenticated user or integrated application to inject malicious data into the application that can then be executed in a victim’s browser. This issue affects: Hitachi ABB Power Grids Ellipse APM 5.3...