Advisories · Technology
F5 BIG-IP APM.
Every CVE that names F5 BIG-IP APM among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
BIG-IP APM access policy vulnerability CVE-2022-35245
- F5 BIG-IP APM
- Memory corruption
- CVSS 7.5 High
BIG-IP APM and F5 SSL Orchestrator vulnerability CVE-2022-33203
- F5 BIG-IP APM
- Denial of service
- CVSS 6.8 Medium
BIG-IP APM Appliance mode vulnerability CVE-2022-31473
- F5 BIG-IP APM
- Path traversal
- CVSS 7.8 High
Incorrect permission assignment in F5 BIG-IP APM and others
- F5 BIG-IP APM
- F5 BIG-IP APM Clients
- Broken access control
- CVSS 7.3 High
Uncontrolled search path in F5 BIG-IP APM and others
- F5 BIG-IP APM
- F5 BIG-IP APM Clients
- CWE-427
- CVSS 5.5 Medium
Sensitive information in log files in F5 BIG-IP APM and others
- F5 BIG-IP APM
- F5 BIG-IP APM Clients
- Information disclosure
- CVSS 6.5 Medium
Improper input validation in F5 BIG-IP APM
- F5 BIG-IP APM
- CWE-20
- CVSS 7.5 High
Cross-site scripting in F5 BIG-IP APM and others
- F5 BIG-IP APM
- F5 BIG-IP Guided Configuration (GC)
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Uncontrolled resource consumption in F5 BIG-IP APM
- F5 BIG-IP APM
- Denial of service
-
F5 BIG-IP APM: In BIG-IP APM portal access on versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2…
- F5 BIG-IP APM
-
F5 BIG-IP APM: On versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1…
- F5 BIG-IP APM
-
Platform dependent weakness.
- F5 BIG-IP APM