CVE-2016-3687: f5 big-ip_access_policy_manager
Vulnerability summary
CVE-2016-3687 is a medium (CVSS 5.3) vulnerability in f5 big-ip_access_policy_manager. EPSS estimates a 1.21% chance of exploitation in the next 30 days, higher than 68.1% of scored vulnerabilities.
Timeline
- 16-06-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Open redirect vulnerability in F5 BIG-IP APM 11.2.1, 11.4.x, 11.5.x, and 11.6.x before 11.6.0 HF6 and Edge Gateway 11.2.1, when using multi-domain single sign-on (SSO), allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in the SSO_ORIG_URI parameter.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.21%
Chance of exploitation in the next 30 days
Percentile
68%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.21% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
F52 products
- big-ip_access_policy_manager11.2.1 | 11.4.0 | 11.4.1 | 11.5.0 | 11.5.1 | 11.5.2 | 11.5.3 | 11.5.4 | 11.6.0
- big-ip_edge_gateway11.2.1
1 vendor · 2 products