Skip to contentF5 Networks, Inc. Big-ip vulnerabilities
- f5 big-ip policy enforcement manager, f5 networks, inc. big-ip (pem) +1 moreIn BIG-IP PEM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0...CVE-2020-59427.5 High
- f5 big-ip application acceleration manager, f5 networks, inc. big-ip (aam) +1 moreIn BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application...CVE-2019-66015.5 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreIn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8,...CVE-2019-66006.1 Medium
- f5 big-ip access policy manager, f5 networks, inc. big-ip apm; enterprise manager +1 moreIn BIG-IP 11.6.1-11.6.3.2 or 11.5.1-11.5.8, or Enterprise Manager 3.1.1, improper escaping of...CVE-2019-65996.1 Medium
- f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or...CVE-2019-65984.3 Medium
- f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn BIG-IP 13.0.0-13.1.1.1, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise...CVE-2019-65977.2 High
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreIn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, 12.1.0-12.1.3.6, 11.6.1-11.6.3.2, or 11.5.1-11.5.8,...CVE-2019-65967.5 High
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreCross-site scripting (XSS) vulnerability in F5 BIG-IP Access Policy Manager (APM) 11.5.x and 11.6...CVE-2019-65956.1 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreOn BIG-IP 11.5.1-11.6.3.2, 12.1.3.4-12.1.3.7, 13.0.0 HF1-13.1.1.1, and 14.0.0-14.0.0.2, Multi...CVE-2019-65945.9 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreOn BIG-IP 11.5.1-11.5.4, 11.6.1, and 12.1.0, a virtual server configured with a Client SSL...CVE-2019-65935.9 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreOn BIG-IP 14.1.0-14.1.0.1, TMM may restart and produce a core file when validating SSL...CVE-2019-65929.1 Critical
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, and 11.6.0-11.6.3.2, a reflected...CVE-2019-65896.1 Medium
- f5 big-ip local traffic manager, f5 networks, inc. big-ip (ltm) +1 moreOn BIG-IP LTM 13.0.0 to 13.0.1 and 12.1.0 to 12.1.3.6, under certain conditions, the TMM may...CVE-2019-65905.9 Medium
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreOn BIG-IP APM 14.0.0 to 14.0.0.4, 13.0.0 to 13.1.1.3 and 12.1.0 to 12.1.3.7, a reflected cross...CVE-2019-65915.4 Medium
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreWhen APM 13.0.0-13.1.x is deployed as an OAuth Resource Server, APM becomes a client application...CVE-2018-153355.9 Medium
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreA cross-site request forgery (CSRF) vulnerability in the APM webtop 11.2.1 or greater may allow...CVE-2018-153344.3 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's user...CVE-2018-153335.5 Medium
- f5 big-ip application acceleration manager, f5 networks, inc. big-ip (aam) +1 moreOn BIG-IP AAM 13.0.0 or 12.1.0-12.1.3.7, the dcdb_convert utility used by BIG-IP AAM fails to...CVE-2018-153317.8 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, when a virtual server using the...CVE-2018-153307.5 High
- f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, or Enterprise Manager 3.1.1, when...CVE-2018-153297.2 High
- f5 enterprise manager, iworkflow, big-ip access policy manager +14 more +16 moreOn BIG-IP 14.0.x, 13.x, 12.x, and 11.x, Enterprise Manager 3.1.1, BIG-IQ 6.x, 5.x, and 4.x, and...CVE-2018-153287.5 High
- f5 big-ip access policy manager, big-ip access policy manager client, f5 networks, inc. big-ip (apm), big-ip apm clients, big-ip edge client +2 moreThe svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs...CVE-2018-153327.0 High
- f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1 or Enterprise Manager 3.1.1, when authenticated...CVE-2018-153277.2 High
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreIn some situations on BIG-IP APM 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, or 11.6.0-11...CVE-2018-153267.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreIn BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, iControl and TMSH usage by authenticated users may...CVE-2018-153254.3 Medium
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreOn BIG-IP APM 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, TMM may restart when processing a specially...CVE-2018-153245.9 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 moreOn BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, in certain circumstances, when processing traffic...CVE-2018-153235.9 Medium
- f5 big-iq centralized management, big-iq cloud and orchestration, enterprise manager +15 more +17 moreOn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6,...CVE-2018-153226.5 Medium
- f5 big-iq centralized management, big-iq cloud and orchestration, enterprise manager +15 more +17 moreWhen BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6,...CVE-2018-153214.9 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, undisclosed traffic patterns may lead to denial of...CVE-2018-153207.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to...CVE-2018-153197.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreIn BIG-IP 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, or 12.1.3.4-12.1.3.6, If an MPTCP connection...CVE-2018-153187.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreIn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an attacker...CVE-2018-153177.5 High
- f5 big-ip apm clients, big-ip edge client, big-ip access policy manager +2 more +4 moreIn F5 BIG-IP APM 13.0.0-13.1.1.1, APM Client 7.1.5-7.1.6, and/or Edge Client 7101-7160, the BIG...CVE-2018-153165.5 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a reflected Cross Site Scripting (XSS)...CVE-2018-153156.1 Medium
- f5 big-ip afm, big-ip advanced firewall manager +1 moreOn F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting...CVE-2018-153146.1 Medium
- f5 big-ip afm, big-ip advanced firewall manager +1 moreOn F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting...CVE-2018-153136.1 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, a reflected Cross-Site Scripting (XSS)...CVE-2018-153126.1 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreWhen F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing...CVE-2018-153115.9 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +6 more +8 moreUnder some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the...CVE-2016-74757.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreOn BIG-IP APM 11.6.0-11.6.3.1, 12.1.0-12.1.3.3, 13.0.0, and 13.1.0-13.1.0.3, APMD may core when...CVE-2018-55497.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreOn BIG-IP APM 11.6.0-11.6.3, an insecure AES ECB mode is used for orig_uri parameter in an...CVE-2018-55486.1 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreA vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3...CVE-2018-153104.3 Medium
- f5 big-ip access policy manager client, f5 networks, inc. big-ip apm client for windows +1 moreWindows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by...CVE-2018-55477.8 High
- f5 big-ip access policy manager, big-ip access policy manager client, f5 networks, inc. big-ip apm client for linux +1 more +3 moreThe svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for...CVE-2018-55467.8 High
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreWhen the F5 BIG-IP APM 13.0.0-13.1.1 or 12.1.0-12.1.3 renders certain pages (pages with a logon...CVE-2018-55447.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreF5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.6, or 11.2.1-11.6.3.2 HTTPS health monitors do not...CVE-2018-55428.1 High
- f5 big-ip (asm), big-ip application security manager +1 moreWhen F5 BIG-IP ASM 13.0.0-13.1.0.1, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.5.1-11.5.6 is...CVE-2018-55417.5 High
- f5 big-ip (asm), big-ip application security manager +1 moreUnder certain conditions, on F5 BIG-IP ASM 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, 11...CVE-2018-55397.5 High
- f5 big-ip domain name system, big-ip global traffic manager, big-ip link controller +2 more +4 moreOn F5 BIG-IP DNS 13.1.0-13.1.0.7, 12.1.3-12.1.3.5, DNS Express / DNS Zones accept NOTIFY messages...CVE-2018-55383.7 Low
- Show moreLoading…