Approved changes feed: RSS · Atom

cpe:2.3:a:f5_networks,_inc.:big-ip_(aam):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorF5 Networks, Inc. (d9f3da1a-2e6b-5a2b-a7d5-689770b93f1f)
ProductBig Ip (Aam) (3bf7c1e8-0eac-54c8-a33c-38b4815a698e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-6601 vulnerable 2026-06-08 05:14:12.497756 Details available
In BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application Acceleration Manager (AAM) wamd process used in processing of images and PDFs fails to drop group permissions when executing helper scripts.
Published: 2019-03-13T22:00:00.000Z
Updated: 2024-09-17T01:31:00.136Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15331 vulnerable 2026-06-08 05:10:53.969647 Details available
On BIG-IP AAM 13.0.0 or 12.1.0-12.1.3.7, the dcdb_convert utility used by BIG-IP AAM fails to drop group permissions when executing helper scripts, which could be used to leverage attacks against the BIG-IP system.
Published: 2018-12-20T20:00:00.000Z
Updated: 2024-09-16T16:33:06.373Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.