CVE-2015-1050

概要

参考情報

• packetstormsecurity.com/files/129911/F5-BIG-IP-Application-Security-Manager-ASM-XSS.html · Exploit
• seclists.org/fulldisclosure/2015/Jan/43 · Exploit
• securityfocus.com/archive/1/534459/100/0/threaded
• securitytracker.com/id/1031551
• exchange.xforce.ibmcloud.com/vulnerabilities/99907

big-ip application security manager のその他の脆弱性

• CVE-2026-63020低 3.1A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages  Impact: …
• CVE-2026-42937中 6.5Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and in BIG-IP iControl RE…
• CVE-2026-42930高 8.7When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Appliance mode restriction…
• CVE-2026-42924高 8.7An authenticated attacker with the Resource Administrator or Administrator role can create SNMP configuration objects through iControl SOAP …
• CVE-2026-42920高 7.5When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic can cause the Traffic …