CVE-2014-6032

3 documents3 sources
Severity
5.5MEDIUM
EPSS
2.5%
top 14.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
13
F5 Big-ip Advanced Firewall ManagerF5 Big-ip AnalyticsF5 Big-ip Application Acceleration Manager+10 more
Timeline
PublishedNov 1
Latest updateMay 17

Description

Multiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM, ASM, GTM, and Link Controller 11.0 through 11.6.0 and 10.0.0 through 10.2.4, AAM 11.4.0 through 11.6.0, ARM 11.3.0 through 11.6.0, Analytics 11.0.0 through 11.6.0, APM and Edge Gateway 11.0.0 through 11.6.0 and 10.1.0 through 10.2.4, PEM 11.3.0 through 11.6.0, PSM 11.0.0 through 11.4.1 and 10.0.0 through 10.2.4, and WOM 11.0.0 through 11.3.0 and 10.0.0 through 10.2.4 and Enterprise Manager 3.0.0 thr…

CVSS vector

AV:N/AC:L/C:P/I:N/A:PExploitability: 8.0 | Impact: 4.9

Affected Packages13 packages

▶NVDf5/enterprise_manager6 versions+5
▶NVDf5/big-ip_edge_gateway11 versions+10
▶NVDf5/big-ip_link_controller17 versions+16
▶NVDf5/big-ip_analytics10 versions+9

🔴Vulnerability Details

2
GHSA
GHSA-q7h6-7472-8hg2: Multiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM, ASM, GTM, and Link Controller 11↗2022-05-17
▶
CVEList
CVE-2014-6032: Multiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM, ASM, GTM, and Link Controller 11↗2014-11-01
▶
CVE-2014-6032 (MEDIUM CVSS 5.5) | Multiple XML External Entity (XXE) | cvebase.io