CVE-2018-15313

The CVE-2018-15313 issue is a reflected Cross-Site Scripting vulnerability in the BIG-IP AFM TMUI page. Affected versions include BIG-IP AFM 13.0.0–13.1.1 and 12.1.0–12.1.3.6. Remediation per F5 advisory: upgrade to 13.1.1.2 (for 13.x) or 12.1.3.7 (for 12.x). Modeled products beyond these version...

CVE-2018-15315

On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a reflected Cross Site Scripting XSS vulnerability in an undisclosed Configuration Utility page...

CVE-2018-15314

CVE-2018-15314 is a reflected XSS in a TMUI page of BIG-IP. Affected are BIG-IP AFM versions 13.0.0–13.1.1.1 and 12.1.0–12.1.3.6. The vulnerability allows a remote attacker to craft a URL that, when visited by an authenticated user, executes JavaScript in that user’s browser. The F5 advisory list...

f5.com XSS vulnerability

Open Bug Bounty ID: OBB-685415 Description| Value ---|--- Affected Website:| f5.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden until...

CVE-2018-15311

When F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing specially crafted TCP traffic with the Large Receive Offload LRO feature enabled, TMM may crash, leading to a failover event. This vulnerability is not exposed unless LRO is enabled, so most affected...

Design/Logic Flaw

When F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing specially crafted TCP traffic with the Large Receive Offload LRO feature enabled, TMM may crash, leading to a failover event. This vulnerability is not exposed unless LRO is enabled, so most affected...

CVE-2018-15311

When F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing specially crafted TCP traffic with the Large Receive Offload LRO feature enabled, TMM may crash, leading to a failover event. This vulnerability is not exposed unless LRO is enabled, so most affected...

CVE-2018-15311

F5 BIG-IP TMM is vulnerable to CVE-2018-15311 when TCP Large Receive Offload (LRO) is enabled. Affects 13.0.0–13.1.0.5, 12.1.0–12.1.3.5, 11.6.0–11.6.3.2, and 11.5.1–11.5.6; LRO is not enabled by default until 13.1.0 for some platforms. Impact: disruption of traffic or failover to another device i...

Shocking: Hackers using Googlebots in cryptomining malware attacks

By Waqas Hackers are abusing Googlebot servers to deliver malicious payloads. Last year, HackRead exclusively reported on how hackers were using Google Adwords and Google Sites to spread malware. Then came another shocking research from Cisco Talos exposing how hackers exploited Google Search...

F5 BIG-IP APM Information Disclosure Vulnerability (CNVD-2019-07130)

F5 BIG-IP Access Policy Manager APM is a suite of access and security solutions from F5 America. The solution provides unified access to business-critical applications and networks. portal access is one of the portal access components. A security vulnerability exists in portal access in F5 BIG-IP...

Code injection

On F5 WebSafe Alert Server 1.0.0-4.2.6, a malicious, authenticated user can execute code on the alert server by using a maliciously crafted payload...

CVE-2018-5545

On F5 WebSafe Alert Server 1.0.0-4.2.6, a malicious, authenticated user can execute code on the alert server by using a maliciously crafted payload...

CVE-2018-5545

On F5 WebSafe Alert Server 1.0.0-4.2.6, a malicious, authenticated user can execute code on the alert server by using a maliciously crafted payload...

CVE-2018-5545

On F5 WebSafe Alert Server 1.0.0-4.2.6, a malicious, authenticated user can execute code on the alert server by using a maliciously crafted payload...

CVE-2018-5545

CVE-2018-5545 affects F5 WebSafe Alert Server versions 1.0.0–4.2.6. An authenticated user can execute arbitrary code on the alert server by sending a malicious payload via the Dashboard. The advisory lists CVSSv3.0 score 8.8 (HIGH) with network access, low privileges required, and no user interac...

F5 Networks BIG-IP : MySQL vulnerability (K73828041)

Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before 5.5.52, 10.0.x before 10.0.28, and 10.1.x before 10.1.18; Percona Server before 5.5.51-38.2, 5.6.x before 5.6.32-78-1, and 5.7.x before 5.7.14-8; and Percona XtraDB Cluster...

CVE-2018-5546

CVE-2018-5546 affects the F5 BIG-IP APM client svpn and policyserver components on Linux and macOS. The vulnerability arises because these components run with elevated privileges on the local host, allowing a local unprivileged user to gain ownership of root-owned files, potentially disclose sens...

CVE-2018-5547

CVE-2018-5547 affects the Windows client for F5 BIG-IP APM. The Windows Logon Integration feature, before version 7.1.7.1, by default runs in Legacy logon mode using a SYSTEM account to establish network access. This can present a certificate policy link in a UI dialog; clicking the link may open...

CVE-2018-5547

Windows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by default uses Legacy logon mode which uses a SYSTEM account to establish network access. This feature displays a certificate user interface dialog box which contains the link to the certificate policy...

CVE-2018-5546

The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host. A malicious local unprivileged user may gain knowledge of...