Multiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM, ASM, GTM, and Link Controller 11.0 through 11.6.0 and 10.0.0 through 10.2.4, AAM 11.4.0 through. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Denial Of Service
XXE
Big Ip Protocol Security Module
Big Ip Global Traffic Manager
Big Ip Policy Enforcement Manager
+10
NVD
CVSS 2.0
5.5
EPSS
2.5%
FortiNet FortiADC-E with firmware 3.1.1 before 4.0.5 and Coyote Point Equalizer with firmware 10.2.0a allows remote attackers to obtain access to arbitrary subnets via unspecified vectors. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Information Disclosure
Fortinet
Coyote Point Equalizer Firmware
Coyote Point Equalizer
Fortiadc Firmware
+4
NVD
CVSS 2.0
6.4
EPSS
0.3%