CVE-2015-8098

CRITICAL 9.8CVE-2015-8098 · Published 12/01/2016 · updated 17/06/2026

In short

CVE-2015-8098 is a CRITICAL (CVSS 9.8) vulnerability affecting big-ip access policy manager (f5).
Chance of exploitation in the next 30 days (EPSS): 4.7%, higher than 91.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
big-ip access policy manager f5	`= 11.2.0= 11.2.1= 11.3.0= 11.4.0= 11.5.0= 11.5.1= 11.6.0`	No fix yet

Description

F5 BIG-IP APM 11.4.1 before 11.4.1 HF9, 11.5.x before 11.5.3, and 11.6.0 before 11.6.0 HF4 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors related to processing a Citrix Remote Desktop connection through a virtual server configured with a remote desktop profile, aka an "Out-of-bounds memory vulnerability."

References

securitytracker.com/id/1034609
support.f5.com/kb/en-us/solutions/public/k/43/sol43552605.html · Vendor Advisory

More vulnerabilities in big-ip access policy manager

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

big-ip access policy manager

= 11.2.0= 11.2.1= 11.3.0= 11.4.0= 11.5.0= 11.5.1= 11.6.0

No fix yet

Description

More vulnerabilities in big-ip access policy manager

See all →