Approved changes feed: RSS · Atom

cpe:2.3:a:f5_networks,_inc.:big-ip_(apm):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorF5 Networks, Inc. (d9f3da1a-2e6b-5a2b-a7d5-689770b93f1f)
ProductBig Ip (Apm) (cae786bd-23e6-5d78-8d84-66d858be3ee8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-6596 vulnerable 2026-06-08 05:14:12.485291 Details available
In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, 12.1.0-12.1.3.6, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when processing fragmented ClientHello messages in a DTLS session TMM may corrupt memory eventually leading to a crash. Only systems offering DTLS connections via APM are impacted.
Published: 2019-03-13T22:00:00.000Z
Updated: 2024-09-16T17:42:59.727Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6595 vulnerable 2026-06-08 05:14:12.484816 Details available
Cross-site scripting (XSS) vulnerability in F5 BIG-IP Access Policy Manager (APM) 11.5.x and 11.6.x Admin Web UI.
Published: 2019-02-26T15:00:00.000Z
Updated: 2024-09-17T02:52:11.402Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6591 vulnerable 2026-06-08 05:14:12.435104 Details available
On BIG-IP APM 14.0.0 to 14.0.0.4, 13.0.0 to 13.1.1.3 and 12.1.0 to 12.1.3.7, a reflected cross-site scripting (XSS) vulnerability exists in the resource information page for authenticated users when a full webtop is configured on the BIG-IP APM system.
Published: 2019-02-05T18:00:00.000Z
Updated: 2024-09-17T04:08:56.646Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5544 vulnerable 2026-06-08 05:11:51.531981 Details available
When the F5 BIG-IP APM 13.0.0-13.1.1 or 12.1.0-12.1.3 renders certain pages (pages with a logon agent or a confirm box), the BIG-IP APM may disclose configuration information such as partition and agent names via URI parameters.
Published: 2018-07-31T14:00:00.000Z
Updated: 2024-09-16T16:53:28.245Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5536 vulnerable 2026-06-08 05:11:51.508222 Details available
A remote attacker via undisclosed measures, may be able to exploit an F5 BIG-IP APM 13.0.0-13.1.0.7 or 12.1.0-12.1.3.5 virtual server configured with an APM per-request policy object and cause a memory leak in the APM module.
Published: 2018-07-25T14:00:00.000Z
Updated: 2024-09-16T17:18:15.658Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5528 vulnerable 2026-06-08 05:11:51.492667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15335 vulnerable 2026-06-08 05:10:53.974692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15334 vulnerable 2026-06-08 05:10:53.974383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15326 vulnerable 2026-06-08 05:10:53.936959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15324 vulnerable 2026-06-08 05:10:53.935605 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15316 vulnerable 2026-06-08 05:10:53.912958 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.