CVE-2021-23036CWE-20

CVE-2021-23036: vulnerability in BIG-IP Advanced WAF and BIG-IP ASM

Published · Updated

Follow this CVE+ Monitor BIG-IP Advanced WAF and BIG-IP ASM

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
On version 16.0.x before 16.0.1.2, when a BIG-IP ASM and DataSafe profile are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected products
n/a · BIG-IP Advanced WAF and BIG-IP ASM