|
195031
|
4.9 |
MEDIUM
Network
|
f5
|
big-ip_access_policy_manager big-ip_guided_configuration
|
On all versions of Guided Configuration before 8.0.0, when a configuration that contains secure properties is created and deployed from Access Guided Configuration (AGC), secure properties are logged…
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2021-23046
|
2024-11-21 14:51 |
2021-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195032
|
8.8 |
HIGH
Network
|
f5
|
big-ip_advanced_firewall_manager
|
On BIG-IP AFM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x, a SQL injection vulnerability exists in an undisclosed …
|
CWE-89
SQL Injection
|
CVE-2021-23040
|
2024-11-21 14:51 |
2021-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195033
|
5.3 |
MEDIUM
Network
|
f5
|
big-ip_access_policy_manager
|
On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, and all versions of 13.1.x, 12.1.x and 11.6.x, when BIG-IP APM performs Online Certificate Status Protocol (OCSP) verifi…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2021-23047
|
2024-11-21 14:51 |
2021-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195034
|
6.5 |
MEDIUM
Network
|
f5
|
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system …
|
On BIG-IP, on all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a directory traversal vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that al…
|
CWE-22
Path Traversal
|
CVE-2021-23043
|
2024-11-21 14:51 |
2021-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195035
|
7.5 |
HIGH
Network
|
f5
|
big-ip_application_acceleration_manager big-ip_local_traffic_manager big-ip_advanced_web_application_firewall big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_secur…
|
On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, and 12.1.x before 12.1.6, when an HTTP profile is configured on a virtual server, undisclos…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2021-23042
|
2024-11-21 14:51 |
2021-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195036
|
6.1 |
MEDIUM
Network
|
f5
|
big-ip_access_policy_manager big-ip_application_security_manager big-ip_advanced_firewall_manager big-ip_advanced_web_application_firewall big-ip_analytics big-ip_domain_name_system
|
On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x, a DOM based cross-site scripting (XSS) vulnerability exists…
|
CWE-79
Cross-site Scripting
|
CVE-2021-23041
|
2024-11-21 14:51 |
2021-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195037
|
6.1 |
MEDIUM
Network
|
f5
|
big-ip_access_policy_manager
|
On version 14.1.x before 14.1.4.4 and all versions of 13.1.x, an open redirect vulnerability exists on virtual servers enabled with a BIG-IP APM access policy. This vulnerability allows an unauthenti…
|
CWE-601
Open Redirect
|
CVE-2021-23052
|
2024-11-21 14:51 |
2021-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195038
|
5.3 |
MEDIUM
Network
|
f5
|
big-ip_advanced_web_application_firewall big-ip_application_security_manager
|
On version 15.1.x before 15.1.3, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6, when the brute force protection feature of BIG-IP Advanced WAF or BIG-IP ASM is enabled on a virtual server and th…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2021-23053
|
2024-11-21 14:51 |
2021-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195039
|
7.5 |
HIGH
Network
|
f5
|
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_advanced_web_application_firewall big-ip_analytics big-ip_application_acceleration_manager big-ip_application_secur…
|
On BIG-IP versions 15.1.0.4 through 15.1.3, when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) driver is used with BIG-IP on Amazon Web Services (AWS) systems, undisclosed reque…
|
NVD-CWE-noinfo
|
CVE-2021-23051
|
2024-11-21 14:51 |
2021-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195040
|
7.5 |
HIGH
Network
|
f5
|
big-ip_application_security_manager big-ip_advanced_web_application_firewall nginx_app_protect
|
On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3 and NGINX App Protect on all versions before 3.5.0, when a cross-site request forgery (CSRF)-enabled poli…
|
NVD-CWE-noinfo
|
CVE-2021-23050
|
2024-11-21 14:51 |
2021-09-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|