Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-65652
HistoryAug 26, 2021 - 12:00 a.m.

F5 BIG-IP Advanced WAF and ASM are unspecified vulnerabilities

2021-08-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
9

0.001 Low

EPSS

Percentile

42.5%

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A security vulnerability exists in F5 BIG-IP Advanced WAF and ASM due to a JSON content profile referenced in an AWAF/ASM security policy that contains policies for URLs and is associated with a virtual server. An undisclosed request could cause the BD process of BIG-IP AWAF/ASM to terminate when the policy containing URLs for content profiles is associated with a virtual server. An attacker could exploit this vulnerability to launch a denial of service against BIG-IP.

0.001 Low

EPSS

Percentile

42.5%

Related for CNVD-2021-65652