Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:f5:big-Ip_access_policy_manager:*:*:*:*:*:*:*:*

5 briefs RSS
low advisory

Bootstrap Cross-Site Scripting Vulnerability

A vulnerability in the Bootstrap framework allows for Cross-Site Scripting (XSS) attacks by an unauthenticated remote attacker, potentially leading to arbitrary script execution in a user's browser.

Bootstrap
1t 1c
critical advisory

Critical RCE Vulnerability in F5 BIG-IP APM

An unauthenticated remote code execution vulnerability (CVE-2026-94127) exists in F5 BIG-IP APM when an OAuth profile is configured on a virtual server, allowing attackers to execute arbitrary code via malformed traffic.

BIG-IP APM cve rce network-security f5
1t 1c
critical advisory

F5 TMUI Remote Code Execution Vulnerability (CVE-2020-5902) Exploitation Attempts

Exploitation attempts targeting F5 BIG-IP, BIG-IQ, and Traffix SDC devices via CVE-2020-5902 are detected through regex pattern matching of exploit strings and directory traversal sequences in syslog data, potentially leading to remote code execution and system compromise.

PoC BIG-IP +6 CVE-2020-5902 F5 TMUI RCE exploit web vulnerability remote-code-execution +1
3r 2t 1c updated
critical threat

F5 BIG-IP APM CVE-2025-53521 Reclassified as Actively Exploited Unauthenticated RCE

F5 has reclassified CVE-2025-53521, a vulnerability in BIG-IP APM, as a critical unauthenticated remote code execution vulnerability and reports it is being actively exploited in the wild.

exploited f5 big-ip apm cve-2025-53521 rce vulnerability
2r 1t 1c updated
critical threat

F5 BIG-IP TMUI Authentication Bypass via CVE-2023-46747

Exploitation of CVE-2023-46747, an authentication bypass vulnerability in F5 BIG-IP's Traffic Management User Interface (TMUI), allows unauthorized access and potentially leads to remote code execution.

PoC BIG-IP Access Policy Manager f5 big-ip tmui authentication-bypass cve-2023-46747 webserver
2r 1t 1c updated