UpHeron
All vulnerabilities

Servers and applications

CVE-2012-3000

Multiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM WebGUI in F5 BIG-IP LTM, GTM, ASM, Link Controller, PSM, APM, Edge Gateway, and Analytics and (2) AVR WebGUI in WebAccelerator and WOM 11.2.x before 11.2.0-HF3 and 11.2.x before 11.2.1-HF3 allow remote authenticated users to execute arbitrary SQL commands via the defaultQuery parameter.

Severity
High 7.5
Published
30 Jan 2014
Last changed
16 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
1.6% in the next 30 daysHigher than 76% of CVEs. EPSS by FIRST, 12 Nov 2026
Weakness
SQL injection (CWE-89)
Attack
Over the network · No login needed
Attacker can
Read some data · Change some data · Slow it down
CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Sources
NVD

Affected software

SoftwareAffected versions
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_access_policy_manager
  • Version 11.1.0
  • Version 11.2.0
  • Version 11.2.1
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_local_traffic_manager
  • Version 11.0.0
  • Version 11.0.0-hf1
  • Version 11.1.0
  • Version 11.1.0-hf2
  • Version 11.2.0
  • Version 11.2.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2012-3000
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2012-3000