CVE-2014-8727

CVE-2014-8727 affects F5 BIG-IP before 10.2.2. The vulnerability is a directory traversal flaw in the properties.jsp and tmui/form paths that an authenticated Resource Administrator or Administrator can use to enumerate and delete arbitrary files (e.g., via .. in the name parameter). Impact is th...

CVE-2014-8727: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in F5 BIG-IP before 10.2.2 allow local users with the "Resource Administrator" or "Administrator" role to enumerate and delete arbitrary files via a .. dot dot in the name parameter to 1 tmui/Control/jspmap/tmui/system/archive/properties.jsp or 2...

PT-2014-8692

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to 10.2.2 Description The issue allows local users with the "Resource Administrator" or "Administrator" role to enumerate and delete arbitrary files. This is achieved by exploiting directory traversal vulnerabilities...

CVE-2008-0265: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Search function in the web management interface in F5 BIG-IP 9.4.3 allow remote attackers to inject arbitrary web script or HTML via the SearchString parameter to 1 listsystem.jsp, 2 listpktfilter.jsp, 3 listltm.jsp, 4 resourcesaudit.jsp, a...