CVE-2017-0304

A SQL injection vulnerability exists in the BIG-IP AFM management UI on versions 12.0.0, 12.1.0, 12.1.1, 12.1.2 and 13.0.0 that may allow a copy of the firewall rules to be tampered with and impact the Configuration Utility until there is a resync of the rules. Traffic processing and the live firewall rules in use are not affected.

• CWE-89

• http://www.securityfocus.com/bid/102332Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040041Third Party Advisory, VDB Entry
• https://support.f5.com/csp/article/K39428424Issue Tracking, Vendor Advisory
• http://www.securityfocus.com/bid/102332Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040041Third Party Advisory, VDB Entry
• https://support.f5.com/csp/article/K39428424Issue Tracking, Vendor Advisory

Published

Dec 21, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-0298A DCOM object in Helppane.exe in Microsoft Windows Server 20…
• CVE-2017-0299The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, …
• CVE-2017-0300The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, …
• CVE-2017-0301In F5 BIG-IP APM software versions 11.5.0, 11.5.1, 11.5.2, 1…
• CVE-2017-0302In F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authen…
• CVE-2017-0303In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, L…
• CVE-2017-0305F5 SSL Intercept iApp version 1.5.0 - 1.5.7 is vulnerable to…
• CVE-2017-0306An elevation of privilege vulnerability in the NVIDIA GPU dr…
• CVE-2017-0307An elevation of privilege vulnerability in the NVIDIA GPU dr…
• CVE-2017-0308All versions of NVIDIA Windows GPU Display Driver contain a …
• CVE-2017-0309All versions of NVIDIA GPU Display Driver contain a vulnerab…
• CVE-2017-0310All versions of NVIDIA GPU Display Driver contain a vulnerab…