| Package | Affected versions | Patched versions |
|---|---|---|
| big-ip access policy manager | = 11.1.0= 11.2.0= 11.2.1 | |
| big-ip analytics | = 11.0.0= 11.1.0= 11.2.0= 11.2.1 | |
| big-ip application security manager | = 11.0.0= 11.1.0= 11.2.0= 11.2.1 | |
| big-ip edge gateway | = 11.0.0= 11.1.0= 11.2.0= 11.2.1 | |
| big-ip global traffic manager | = 11.0.0= 11.1.0= 11.2.0= 11.2.1 | |
| big-ip link controller | = 11.0.0= 11.1.0= 11.2.0= 11.2.1 | |
| big-ip local traffic manager | = 11.0.0= 11.1.0= 11.2.0= 11.2.1 | |
| big-ip protocol security module | = 11.0.0= 11.1.0= 11.2.0= 11.2.1 | |
| big-ip wan optimization manager | = 11.0.0= 11.1.0= 11.2.0= 11.2.1 | |
| big-ip webaccelerator | = 11.0.0= 11.1.0= 11.2.0= 11.2.1 |
Multiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM WebGUI in F5 BIG-IP LTM, GTM, ASM, Link Controller, PSM, APM, Edge Gateway, and Analytics and (2) AVR WebGUI in WebAccelerator and WOM 11.2.x before 11.2.0-HF3 and 11.2.x before 11.2.1-HF3 allow remote authenticated users to execute arbitrary SQL commands via the defaultQuery parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free