CVE-2013-0150
highpriority · track · 39EPSS 0.063 · 94 %ileEUUSEPSS · scored 2026-10-27
Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, FirePass 6.0.0 through 6.1.0 and 7.0.0, and other products "when APM is provisioned," allows remote attackers to upload and execute arbitrary files via a .. (dot dot) in the filename parameter.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (24)
Products and version ranges known to be affected.
- f5 big-ip access policy manager10.1.0 → 10.2.4nvdUScpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
- f5 big-ip access policy manager11.0.0 → 11.3.0nvdUScpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*
- f5 big-ip advanced firewall manager= 11.3.0nvdUScpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*
- f5 big-ip application security manager10.1.0 → 10.2.4nvdUScpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
- f5 big-ip application security manager11.0.0 → 11.3.0nvdUScpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*
- f5 big-ip global traffic manager10.1.0 → 10.2.4nvdUScpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
- f5 big-ip global traffic manager11.0.0 → 11.3.0nvdUScpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*
- f5 big-ip local traffic manager10.1.0 → 10.2.4nvdUScpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
- f5 big-ip local traffic manager11.0.0 → 11.3.0nvdUScpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*
- f5 big-ip policy enforcement manager= 11.3.0nvdUScpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*
- f5 big-ip protocol security module10.1.0 → 10.2.4nvdUScpe:2.3:a:f5:big-ip_protocol_security_module:*:*:*:*:*:*:*:*
- f5 big-ip protocol security module11.0.0 → 11.3.0nvdUScpe:2.3:a:f5:big-ip_protocol_security_module:*:*:*:*:*:*:*:*
- f5 big-ip wan optimization manager10.1.0 → 10.2.4nvdUScpe:2.3:a:f5:big-ip_wan_optimization_manager:*:*:*:*:*:*:*:*
- f5 big-ip wan optimization manager11.0.0 → 11.3.0nvdUScpe:2.3:a:f5:big-ip_wan_optimization_manager:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (9)
External citations — patches, advisories, analysis.
- http://secunia.com/advisories/53477cnnvd
- http://support.f5.com/kb/en-us/solutions/public/14000/400/sol14468.htmlcnnvd
- https://nealpoole.com/blog/2013/07/code-execution-via-f5-networks-java-applet/cnnvd
- http://secunia.com/advisories/53477enisa_euvd
- http://support.f5.com/kb/en-us/solutions/public/14000/400/sol14468.htmlenisa_euvd
- https://nealpoole.com/blog/2013/07/code-execution-via-f5-networks-java-applet/enisa_euvd
- http://secunia.com/advisories/53477Not ApplicableVendor Advisorynvd
- http://support.f5.com/kb/en-us/solutions/public/14000/400/sol14468.htmlVendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan