f5 big-ip advanced web application firewall, f5 big-ip application security manager
CVSS 9.9 · Critical EPSS 2,8%
Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada f5 big-ip advanced web application firewall, f5 big-ip application security manager. Skor CVSS 3.1 9.9 (Critical) menurut NVD.
On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, an authenticated user may perform a privilege escalation on the BIG-IP Advanced WAF and ASM Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| f5 | big-ip advanced web application firewall | Versi 11.6.1 hingga 11.6.5.2 |
| f5 | big-ip advanced web application firewall | Versi 12.1.0 hingga 12.1.5 |
| f5 | big-ip advanced web application firewall | Versi 13.1.0 hingga 13.1.3 |
| f5 | big-ip advanced web application firewall | Versi 14.1.0 hingga 14.1.4 |
| f5 | big-ip advanced web application firewall | Versi 15.1.0 hingga 15.1.2 |
| f5 | big-ip advanced web application firewall | Versi 16.0.0 hingga 16.0.1.1 |
| f5 | big-ip application security manager | Versi 11.6.1 hingga 11.6.5.2 |
| f5 | big-ip application security manager | Versi 12.1.0 hingga 12.1.5 |
| f5 | big-ip application security manager | Versi 13.1.0 hingga 13.1.3 |
| f5 | big-ip application security manager | Versi 14.1.0 hingga 14.1.4 |
| f5 | big-ip application security manager | Versi 15.1.0 hingga 15.1.2 |
| f5 | big-ip application security manager | Versi 16.0.0 hingga 16.0.1.1 |