F5 Networks, Inc. BIG IP (Aam) vulnerabilities

2 vulnerabilities

Known vulnerabilities in F5 Networks, Inc. BIG IP (Aam), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2018-15331f5 networks, inc.big-ip (aam)+1
EPSS score
0.88%
On BIG-IP AAM 13.0.0 or 12.1.0-12.1.3.7, the dcdb_convert utility used by BIG-IP AAM fails to drop group permissions when executing helper scripts, which could be used to leverage attacks against the BIG-IP system.5.5CVE-2019-6601f5 networks, inc.big-ip (aam)+1
EPSS score
0.32%
In BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application Acceleration Manager (AAM) wamd process used in processing of images and PDFs fails to drop group permissions when executing helper scripts.