Veille CVE

Recherche « F5 big-ip access policy manager »

2 CVE

Critique 1 Élevée 0 Moyenne 0 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « F5 big-ip access policy manager » ✕
  1. CVE-2026-94127 9.8 Critique Exploitée

    F5 BIG-IP · F5 big-ip access policy manager

    When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). This vulnerability is only present when BIG-IP APM is configured as an OAuth Authorization Server. Deployments using APM strictly as an OAuth Client / Resource Server (without OAuth authorization server profiles configured) are not affected by this vulnerability. Impact: This vulnerability allows an unauthenticated attacker to perform remote code execution. The BIG-IP system in Appliance mode is also vulnerable. This is a data plane issue; there is no control plane exposure. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  2. CVE-2026-63020 3.1 Faible

    F5 BIG-IP · F5 big-ip access policy manager · F5 big-ip advanced firewall manager · F5 big-ip advanced web application firewall

    A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages  Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message in the victim's BIG-IP Configuration utility web browser session. This is a control plane issue; there is no data plane exposure. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.