Big-ip Application Security Manager Security Vulnerabilities and Issues — Big-ip Application Security Manager CVE List

Lucene search

F5Big-ip Application Security Manager

4 matches found

CVE•added 2017/03/27 3:59 p.m.•53 views

CVE-2016-7474

In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain normally unrecoverable information.

5.5CVSS5.7AI score0.00108EPSS

CVE•added 2017/03/23 2:59 p.m.•52 views

CVE-2016-7468

An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic. This vulnerability affects virtual servers associated with TCP profiles when the BIG-IP system's tm.tcpprogressive db variable value is set to non-defaul...

5.9CVSS6.5AI score0.00917EPSS

CVE•added 2017/03/27 6:59 p.m.•51 views

CVE-2016-9252

The Traffic Management Microkernel (TMM) in F5 BIG-IP before 11.5.4 HF3, 11.6.x before 11.6.1 HF2 and 12.x before 12.1.2 does not properly handle minimum path MTU options for IPv6, which allows remote attackers to cause a denial-of-service (DoS) through unspecified vectors.

7.5CVSS7.4AI score0.01195EPSS

CVE•added 2017/03/07 9:59 p.m.•42 views

CVE-2016-9245

In F5 BIG-IP systems 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings. The issue is also exposed with the non-default "Normalize URI" configuration options used in iRu...

5.9CVSS5.8AI score0.00655EPSS