CVE-2015-8098

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-01-12 · updated 2026-06-17
Weakness: CWE-119

Description

F5 BIG-IP APM 11.4.1 before 11.4.1 HF9, 11.5.x before 11.5.3, and 11.6.0 before 11.6.0 HF4 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors related to processing a Citrix Remote Desktop connection through a virtual server configured with a remote desktop profile, aka an "Out-of-bounds memory vulnerability."

Affected products

F5 BIG-IP APM: 11.2.0, 11.2.1, 11.3.0, 11.4.0, 11.5.0, 11.5.1 (+1)

References

http://www.securitytracker.com/id/1034609
https://support.f5.com/kb/en-us/solutions/public/k/43/sol43552605.html
http://www.securitytracker.com/id/1034609
https://support.f5.com/kb/en-us/solutions/public/k/43/sol43552605.html

Get alerted when CVE-2015-8098 or the next vulnerability affects your stack