Vulnerabilities (CVE)

Filtered by vendor F5 Subscribe
Filtered by product Big-ip
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-9342 1 F5 1 Big-ip 2023-12-10 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the tree view (pl_tree.php) feature in Application Security Manager (ASM) in F5 BIG-IP 11.3.0 allows remote attackers to inject arbitrary web script or HTML by accessing a crafted URL during automatic policy generation.
CVE-2008-7032 1 F5 1 Big-ip 2023-12-10 6.8 MEDIUM N/A
Web Management Console Cross-site request forgery (CSRF) vulnerability in the web management console in F5 BIG-IP 9.4.3 allows remote attackers to hijack the authentication of administrators for requests that create new administrators and execute shell commands, as demonstrated using tmui/Control/form.
CVE-2007-6258 2 Apache, F5 2 Mod Jk, Big-ip 2023-12-10 7.5 HIGH N/A
Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary code via a long (1) Host header, or (2) Hostname within a Host header.