f5 big-ip advanced web application firewall, f5 big-ip application security manager
CVSS 7.5 · High EPSS 0,93%
Kerentanan Improper Input Validation pada f5 big-ip advanced web application firewall, f5 big-ip application security manager. Skor CVSS 3.1 7.5 (High) menurut NVD.
On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, and 13.1.x before 13.1.4, when JSON content profiles are configured for URLs as part of an F5 Advanced Web Application Firewall (WAF)/BIG-IP ASM security policy and applied to a virtual server, undisclosed requests may cause the BIG-IP ASM bd process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| f5 | big-ip advanced web application firewall | Versi 13.1.3.5 hingga 13.1.3.6 |
| f5 | big-ip advanced web application firewall | Versi 14.1.3.1 hingga 14.1.4.1 |
| f5 | big-ip advanced web application firewall | Versi 15.1.1 hingga sebelum 15.1.3.1 |
| f5 | big-ip advanced web application firewall | Versi 16.0.1 |
| f5 | big-ip application security manager | Versi 13.1..3.5 hingga 13.1.3.6 |
| f5 | big-ip application security manager | Versi 14.1.3.1 hingga 14.1.4.1 |
| f5 | big-ip application security manager | Versi 15.1.0 hingga sebelum 15.1.3.1 |
| f5 | big-ip application security manager | Versi 16.0.1 |