|
195461
|
7.5 |
HIGH
Network
|
f5
|
big-ip_global_traffic_manager big-ip_domain_name_system big-ip_advanced_web_application_firewall big-ip_application_security_manager big-ip_access_policy_manager big-ip_link_controller…
|
On BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3, cooperation between malicious HTTP client code and a malicious server may cause TMM to restart and generate a core file. Note: Software versions w…
|
NVD-CWE-noinfo
|
CVE-2021-22977
|
2024-11-21 14:51 |
2021-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195462
|
7.5 |
HIGH
Network
|
f5
|
big-ip_application_security_manager
|
On BIG-IP APM version 16.0.x before 16.0.1.1, under certain conditions, when processing VPN traffic with APM, TMM consumes excessive memory. A malicious, authenticated VPN user may abuse this to perf…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2021-22985
|
2024-11-21 14:51 |
2021-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195463
|
5.4 |
MEDIUM
Network
|
f5
|
big-ip_advanced_firewall_manager
|
On BIG-IP AFM version 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.5, authenticated users accessing the Configuration utility for AFM are vulnerable to a cross-site scriptin…
|
CWE-79
Cross-site Scripting
|
CVE-2021-22983
|
2024-11-21 14:51 |
2021-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195464
|
7.2 |
HIGH
Network
|
f5
|
big-ip_domain_name_system big-ip_global_traffic_manager
|
On BIG-IP DNS and GTM version 13.1.x before 13.1.0.4, and all versions of 12.1.x and 11.6.x, big3d does not securely handle and parse certain payloads resulting in a buffer overflow. Note: Software v…
|
CWE-120
Classic Buffer Overflow
|
CVE-2021-22982
|
2024-11-21 14:51 |
2021-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195465
|
4.8 |
MEDIUM
Network
|
f5
|
big-ip_local_traffic_manager big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…
|
On all versions of BIG-IP 12.1.x and 11.6.x, the original TLS protocol includes a weakness in the master secret negotiation that is mitigated by the Extended Master Secret (EMS) extension defined in …
|
NVD-CWE-noinfo
|
CVE-2021-22981
|
2024-11-21 14:51 |
2021-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195466
|
7.8 |
HIGH
Local
|
f5
|
big-ip_access_policy_manager access_policy_manager_clients
|
In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1.8.5, an untrusted search path vulnerability in the BIG-IP APM Client Troubleshooting Utility (CTU) fo…
|
CWE-426
Untrusted Search Path
|
CVE-2021-22980
|
2024-11-21 14:51 |
2021-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195467
|
6.1 |
MEDIUM
Network
|
f5
|
big-ip_local_traffic_manager big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…
|
On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.2.8, 13.1.x before 13.1.3.5, and all 12.1.x versions, a reflected Cross-Site Scripting (XSS) vulnerability exists in a…
|
CWE-79
Cross-site Scripting
|
CVE-2021-22979
|
2024-11-21 14:51 |
2021-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195468
|
7.5 |
HIGH
Network
|
f5
|
big-ip_application_security_manager big-ip_advanced_web_application_firewall
|
On BIG-IP Advanced WAF and ASM version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, and all 12.1.x versions, when the BIG-IP ASM system processes WebS…
|
NVD-CWE-Other
|
CVE-2021-22976
|
2024-11-21 14:51 |
2021-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195469
|
7.5 |
HIGH
Network
|
f5
|
big-ip_global_traffic_manager big-ip_domain_name_system big-ip_advanced_web_application_firewall big-ip_application_security_manager big-ip_access_policy_manager big-ip_link_controller…
|
On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, and 14.1.x before 14.1.3.1, under some circumstances, Traffic Management Microkernel (TMM) may restart on the BIG-IP system while pas…
|
NVD-CWE-noinfo
|
CVE-2021-22975
|
2024-11-21 14:51 |
2021-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195470
|
7.5 |
HIGH
Network
|
f5
|
big-iq_centralized_management big-ip_advanced_firewall_manager big-ip_fraud_protection_service big-ip_global_traffic_manager big-ip_domain_name_system big-ip_advanced_web_application_f…
|
On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6 and all versions of BIG-IQ 7.x and 6.x, an authenticated attacker with access to iCo…
|
CWE-362
Race Condition
|
CVE-2021-22974
|
2024-11-21 14:51 |
2021-02-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|