Browse CVEs

HIGH 8.8 CVE-2021-23026 BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x an… Big Ip Access Policy Manager after 16.0.1.1 Fix from $1,9502021-09-14 MEDIUM 6.1 CVE-2021-23027 On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, and 14.1.x before 14.1.4.3, a DOM based cross-site scripting (XSS) vulnerability exists in… Big Ip Access Policy Manager after 16.0.1.1 Fix from $1,6002021-09-14 HIGH 8.8 CVE-2021-23025 On version 15.1.x before 15.1.0.5, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all versions of 12.1.x and 11.6.x, an authenticated remote com… Big Ip Access Policy Manager 13.1.3.5 / 14.1.3.1+ Fix from $1,9502021-09-14 HIGH 7.5 CVE-2021-23028 On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, and 13.1.x before 13.1.4, when JSON content profiles are configure… Big Ip Advanced Web Application Firewall 15.1.3.1+ Fix from $1,9502021-09-14 HIGH 7.5 CVE-2021-23030 On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all… Big Ip Advanced Web Application Firewall after 16.0.1.1 Fix from $1,9502021-09-14 CRITICAL 9.9 CVE-2021-23031 On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5… Big Ip Advanced Web Application Firewall after 16.0.1.1 Fix from $2,3002021-09-14 HIGH 7.5 CVE-2021-23036 On version 16.0.x before 16.0.1.2, when a BIG-IP ASM and DataSafe profile are configured on a virtual server, undisclosed requests can cause the Traf… Big Ip Advanced Web Application Firewall after 16.0.1 Fix from $1,9502021-09-14 CRITICAL 9.6 CVE-2021-23037 On all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting (XSS) vulnerability exists in an undi… Big Ip Access Policy Manager after 16.1.0 Fix from $2,3002021-09-14 CRITICAL 9.0 CVE-2021-23038 On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x, a stored cross… Big Ip Access Policy Manager 13.1.4.1 / 14.1.4.2+ Fix from $2,3002021-09-14 HIGH 7.5 CVE-2021-23032 On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x, when a BIG-IP DNS system is con… Big Ip Domain Name System 14.1.4.4 / 15.1.3.1+ Fix from $1,9502021-09-14 HIGH 7.5 CVE-2021-23033 On BIG-IP Advanced WAF and BIG-IP ASM version 16.x before 16.1.0x, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all ve… Big Ip Advanced Web Application Firewall 13.1.4.1 / 14.1.4.3+ Fix from $1,9502021-09-14 HIGH 7.5 CVE-2021-23034 On BIG-IP version 16.x before 16.1.0 and 15.1.x before 15.1.3.1, when a DNS profile using a DNS cache resolver is configured on a virtual server, und… Big Ip Access Policy Manager 15.1.3.1 / 16.1.0+ Fix from $1,9502021-09-14 HIGH 7.5 CVE-2021-23035 On BIG-IP 14.1.x before 14.1.4.4, when an HTTP profile is configured on a virtual server, after a specific sequence of packets, chunked responses can… Big Ip Access Policy Manager after 14.1.4.4 Fix from $1,9502021-09-14 HIGH 7.5 CVE-2021-23039 On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.2.8, and all versions of 13.1.x and 12.1.x, when IPSec is configured on a… Big Ip Access Policy Manager 14.1.2.8 / 15.1.3+ Fix from $1,9502021-09-14 HIGH 7.5 CVE-2021-23045 On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when an… Big Ip Access Policy Manager 13.1.4.1 / 14.1.4.3+ Fix from $1,9502021-09-14 HIGH 7.5 CVE-2021-23044 On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, … Big Ip Access Policy Manager 13.1.4.1 / 14.1.4.2+ Fix from $1,9502021-09-14 HIGH 7.5 CVE-2021-23042 On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, and 12.1.x before 12.1.6, when an HTTP pr… Big Ip Access Policy Manager 12.1.6 / 13.1.4+ Fix from $1,9502021-09-14 MEDIUM 6.5 CVE-2021-23043 On BIG-IP, on all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a directory traversal vulnerability exists in an undisclose… Big Ip Access Policy Manager after 16.1.0 Fix from $1,6002021-09-14 HIGH 8.8 CVE-2021-23040 On BIG-IP AFM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x, a SQL… Big Ip Advanced Firewall Manager 13.1.4.1 / 14.1.4.2+ Fix from $1,9502021-09-14 MEDIUM 6.1 CVE-2021-23041 On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x, a DOM bas… Big Ip Access Policy Manager 13.1.4.1 / 14.1.4.2+ Fix from $1,6002021-09-14 MEDIUM 5.3 CVE-2021-23047 On version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, and all versions of 13.1.x, 12.1.x and 11.6.x, when BIG-IP APM perform… Big Ip Access Policy Manager 13.1.4 / 14.1.4.3+ Fix from $1,6002021-09-14 HIGH 7.5 CVE-2021-23049 On BIG-IP version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3, when the iRules RESOLVER::summarize command is used on a virtual server, undisclos… Big Ip Access Policy Manager 15.1.3 / 16.0.1.2+ Fix from $1,9502021-09-14 HIGH 7.5 CVE-2021-23050 On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3 and NGINX App Protect on all versions before 3.5.0, whe… Big Ip Advanced Web Application Firewall 3.5.0 / 15.1.3.1+ Fix from $1,9502021-09-14 HIGH 7.5 CVE-2021-23051 On BIG-IP versions 15.1.0.4 through 15.1.3, when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) driver is used with BIG-IP on Am… Big Ip Access Policy Manager 15.1.3.1+ Fix from $1,9502021-09-14 MEDIUM 6.1 CVE-2021-23052 On version 14.1.x before 14.1.4.4 and all versions of 13.1.x, an open redirect vulnerability exists on virtual servers enabled with a BIG-IP APM acce… Big Ip Access Policy Manager 14.1.4.4+ Fix from $1,6002021-09-14 MEDIUM 5.3 CVE-2021-23053 On version 15.1.x before 15.1.3, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6, when the brute force protection feature of BIG-IP Advanced WAF o… Big Ip Advanced Web Application Firewall 13.1.3.6 / 14.1.3.1+ Fix from $1,6002021-09-14 HIGH 7.5 CVE-2021-23048 On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6… Big Ip Access Policy Manager 13.1.4.1 / 14.1.4.3+ Fix from $1,9502021-09-14 HIGH 7.8 CVE-2021-23022 On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, the BIG-IP Edge Client Windows Installer Service's temporary folder has weak fil… Big Ip Access Policy Manager 7.2.1.3+ Fix from $1,9502021-06-10 HIGH 7.8 CVE-2021-23023 On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, a DLL hijacking issue exists in cachecleaner.dll included in the BIG-IP Edge Cli… Big Ip Access Policy Manager 7.2.1.3+ Fix from $1,9502021-06-10 HIGH 7.2 CVE-2021-23024EPSS 5% On version 8.0.x before 8.0.0.1, and all 6.x and 7.x versions, the BIG-IQ Configuration utility has an authenticated remote command execution vulnera… Big Iq Centralized Management 8.0.0.1+ Fix from $1,9502021-06-10