Directory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0 FirePass 6.0.0 through 6.1.0 and 7.0.0 and other products \when APM is provisioned \ allows remote attackers to upload and execute arbitrary files via a .. (dot dot) in the filename parameter.