Approved changes feed: RSS · Atom

cpe:2.3:a:f5_networks,_inc.:big-ip_afm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorF5 Networks, Inc. (d9f3da1a-2e6b-5a2b-a7d5-689770b93f1f)
ProductBig Ip Afm (e5dc61a2-7c2d-5260-9ac7-b118b78f0836)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-15314 vulnerable 2026-06-08 05:10:53.909222 Details available
On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page.
Published: 2018-10-19T13:00:00.000Z
Updated: 2024-09-16T18:24:44.180Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15313 vulnerable 2026-06-08 05:10:53.908684 Details available
On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page.
Published: 2018-10-19T13:00:00.000Z
Updated: 2024-09-16T20:22:56.163Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6142 vulnerable 2026-06-08 05:09:50.717532 Details available
X509 certificate verification was not correctly implemented in the early access "user id" feature in the F5 BIG-IP Advanced Firewall Manager versions 13.0.0, 12.1.0-12.1.2, and 11.6.0-11.6.2, and thus did not properly validate the remote server's identity on certain versions of BIG-IP.
Published: 2018-01-19T14:00:00.000Z
Updated: 2024-09-16T22:01:51.680Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-0304 vulnerable 2026-06-08 05:08:25.930330 Details available
A SQL injection vulnerability exists in the BIG-IP AFM management UI on versions 12.0.0, 12.1.0, 12.1.1, 12.1.2 and 13.0.0 that may allow a copy of the firewall rules to be tampered with and impact the Configuration Utility until there is a resync of the rules. Traffic processing and the live firewall rules in use are not affected.
Published: 2017-12-21T17:00:00.000Z
Updated: 2024-09-16T17:53:20.416Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.