Vulnerabilities > F5 > BIG IP Access Policy Manager > 15.1.1

DATE CVE VULNERABILITY TITLE RISK
2020-10-29 CVE-2020-5934 Unspecified vulnerability in F5 Big-Ip Access Policy Manager
On BIG-IP APM 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when multiple HTTP requests from the same client to configured SAML Single Logout (SLO) URL are passing through a TCP Keep-Alive connection, traffic to TMM can be disrupted.
low complexity
f5
6.5
6.5
2020-10-29 CVE-2020-5933 Unspecified vulnerability in F5 products
On versions 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, when a BIG-IP system that has a virtual server configured with an HTTP compression profile processes compressed HTTP message payloads that require deflation, a Slowloris-style attack can trigger an out-of-memory condition on the BIG-IP system.
network
low complexity
f5
7.5
7.5