GCVE - cpe:2.3:h:f5:enterprise_manager:2.3.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:f5:enterprise_manager:2.3.0:*:*:*:*:*:*:*

part: h version: 2.3.0 update: *

Vendor	F5 (`cb05c4a2-e02e-586f-b9d0-d0370178d1e5`)
Product	Enterprise Manager (`43a545d5-4afe-5ceb-af77-db281c2502d4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-6032`	vulnerable	2026-06-08 05:05:56.098535	Details available Multiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM, ASM, GTM, and Link Controller 11.0 through 11.6.0 and 10.0.0 through 10.2.4, AAM 11.4.0 through 11.6.0, ARM 11.3.0 through 11.6.0, Analytics 11.0.0 through 11.6.0, APM and Edge Gateway 11.0.0 through 11.6.0 and 10.1.0 through 10.2.4, PEM 11.3.0 through 11.6.0, PSM 11.0.0 through 11.4.1 and 10.0.0 through 10.2.4, and WOM 11.0.0 through 11.3.0 and 10.0.0 through 10.2.4 and Enterprise Manager 3.0.0 through 3.1.1 and 2.1.0 through 2.3.0 allow remote authenticated users to read arbitrary files and cause a denial of service via a crafted request, as demonstrated using (1) viewList or (2) deal elements. Published: 2014-11-01T23:00:00.000Z Updated: 2024-08-06T12:03:02.334Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1031145 https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-6032/ http://www.securitytracker.com/id/1031144 http://seclists.org/fulldisclosure/2014/Oct/128 https://exchange.xforce.ibmcloud.com/vulnerabilities/98403	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4023`	vulnerable	2026-06-08 05:05:43.914771	Details available Cross-site scripting (XSS) vulnerability in tmui/dashboard/echo.jsp in the Configuration utility in F5 BIG-IP LTM, APM, ASM, GTM, and Link Controller 11.0.0 before 11.6.0 and 10.1.0 through 10.2.4, AAM 11.4.0 before 11.6.0, AFM and PEM 11.3.0 before 11.6.0, Analytics 11.0.0 through 11.5.1, Edge Gateway, WebAccelerator, and WOM 11.0.0 through 11.3.0 and 10.1.0 through 10.2.4, and PSM 11.0.0 through 11.4.1 and 10.1.0 through 10.2.4 and Enterprise Manager 3.0.0 through 3.1.1 and 2.1.0 through 2.3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2014-10-28T14:00:00.000Z Updated: 2024-08-06T11:04:27.745Z Open on db.gcve.eu Reference links https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140828-F5_BIG-IP_Reflected_XSS_v10.txt https://support.f5.com/kb/en-us/solutions/public/15000/500/sol15532.html http://www.securitytracker.com/id/1030776	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-1493`	vulnerable	2026-06-08 05:00:49.019824	Details available F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manager before 2.1.0-HF2, 2.2.x before 2.2.0-HF1, and 2.3.x before 2.3.0-HF3, use a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins via the PubkeyAuthentication option. Published: 2012-07-09T22:00:00.000Z Updated: 2024-09-17T01:20:39.832Z Open on db.gcve.eu Reference links http://support.f5.com/kb/en-us/solutions/public/13000/600/sol13600.html https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/f5_bigip_known_privkey.rb https://www.trustmatta.com/advisories/MATTA-2012-002.txt http://www.theregister.co.uk/2012/06/13/f5_kit_metasploit_exploit/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.