VulnSocial

CVE-2013-3587(f5 / arx)

LOWCVSS 5.9 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which makes it easier for man-in-the-middle attackers to obtain plaintext secret values by observing length differences during a series of guesses in which a string in an HTTP request URL potentially matches an unknown string in an HTTP response body, aka a "BREACH" attack, a different issue than CVE-2012-4929.

f5 CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-200

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • arx
  • big-ip_access_policy_manager
  • big-ip_advanced_firewall_manager
  • big-ip_analytics

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
f5
Products
arxbig-ip_access_policy_managerbig-ip_advanced_firewall_managerbig-ip_analyticsbig-ip_application_acceleration_managerbig-ip_application_security_managerbig-ip_edge_gatewaybig-ip_link_controllerbig-ip_local_traffic_managerbig-ip_policy_enforcement_manager

2 versions affected across 14 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-17: 110-17
Full discourse1 post
  • minousoft@minousoft

    @IamKyros69 Wondering about the next BREACH style attack / CVE-2013-3587 / compression oracle

    00000193
    109 followersView on X
CPE platform detail23 entries

23 of 23 entries

PartVendorProductVersionTarget SWTarget HW
Appf5arx---
Appf5big-ip_access_policy_manager---
Appf5big-ip_access_policy_manager13.0.0--
Appf5big-ip_advanced_firewall_manager---
Appf5big-ip_advanced_firewall_manager13.0.0--
Appf5big-ip_analytics---
Appf5big-ip_analytics13.0.0--
Appf5big-ip_application_acceleration_manager---
Appf5big-ip_application_acceleration_manager13.0.0--
Appf5big-ip_application_security_manager---
Appf5big-ip_application_security_manager13.0.0--
Appf5big-ip_edge_gateway---
Appf5big-ip_link_controller---
Appf5big-ip_link_controller13.0.0--
Appf5big-ip_local_traffic_manager---
Appf5big-ip_local_traffic_manager13.0.0--
Appf5big-ip_policy_enforcement_manager---
Appf5big-ip_policy_enforcement_manager13.0.0--
Appf5big-ip_protocol_security_module---
Appf5big-ip_wan_optimization_manager---
Appf5big-ip_webaccelerator---
Appf5firepass---
Appf5firepass7.0.0--

Explore more

Back to dashboardf5 CVEsarx vulnerabilities