Skip to contentF5 Big-ip vulnerabilities
- f5 big-ip edge gateway, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreIncomplete blacklist vulnerability in the Configuration utility in F5 BIG-IP LTM, Analytics, APM,...CVE-2015-80214.3 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +7 more +9 moreThe Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM,...CVE-2015-82407.5 High
- gnu glibc, canonical ubuntu linux, debian linux +26 more +28 moreMultiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the...CVE-2015-7547Public exploitFix availableEPSS 92.4%8.1 High
- f5 big-ip analytics, big-ip edge gateway, big-iq cloud +15 more +17 moreMemory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2...CVE-2015-55167.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +6 more +8 moreBIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, and PEM 12.0.0 before HF1 on the...CVE-2015-86119.8 Critical
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +5 more +7 moreBIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the...CVE-2015-77593.7 Low
- f5 big-ip edge gateway, big-iq centralized management, big-iq cloud +17 more +19 moredcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0...CVE-2015-73937.4 High
- f5 big-ip access policy managerF5 BIG-IP APM 11.4.1 before 11.4.1 HF9, 11.5.x before 11.5.3, and 11.6.0 before 11.6.0 HF4 allow...CVE-2015-80989.8 Critical
- f5 big-ip edge gateway, big-iq adc, big-iq cloud +15 more +17 moreThe iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0...CVE-2015-3628Public exploitEPSS 69.3%9.0 High
- f5 big-ip analytics, big-ip edge gateway, big-iq adc +15 more +17 moreThe datastor kernel module in F5 BIG-IP Analytics, APM, ASM, Link Controller, and LTM 11.1.0...CVE-2015-73949.0 High
- f5 big-ip analytics, big-ip edge gateway, big-ip access policy manager +10 more +12 moreThe vCMP host in F5 BIG-IP Analytics, APM, ASM, GTM, Link Controller, and LTM 11.0.0 before 11.6...CVE-2015-65466.1 Medium
- f5 big-ip edge gateway, big-ip advanced firewall manager, big-ip analytics +7 more +9 moreThe FastL4 virtual server in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller,...CVE-2015-46385.0 Medium
- f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreDirectory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and...CVE-2015-4040Public exploit4.0 Medium
- f5 big-iq adc, big-iq cloud, big-ip access policy manager +9 more +11 moreMemory leak in the virtual server component in F5 Big-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM,...CVE-2015-50587.8 High
- ipsec-tools, canonical ubuntu linux, debian linux +22 more +24 moreracoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL...CVE-2015-4047Fix available7.8 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +7 more +9 moreThe automatic signature update functionality in the (1) Phone Home feature in F5 BIG-IP LTM, AAM,...CVE-2014-93264.3 Medium
- f5 big-ip application security managerCross-site scripting (XSS) vulnerability in F5 BIG-IP Application Security Manager (ASM) before...CVE-2015-10504.3 Medium
- f5 big-iq cloud, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreThe SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0...CVE-2014-8730EPSS 13.8%4.3 Medium
- f5 big-ipCross-site scripting (XSS) vulnerability in the tree view (pl_tree.php) feature in Application...CVE-2014-93424.3 Medium
- f5 big-ip local traffic managerMultiple directory traversal vulnerabilities in F5 BIG-IP before 10.2.2 allow local users with...CVE-2014-8727Public exploit6.2 Medium
- f5 enterprise manager, big-ip advanced firewall manager, big-ip analytics +10 more +12 moreMultiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM,...CVE-2014-60325.5 Medium
- f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreCross-site scripting (XSS) vulnerability in tmui/dashboard/echo.jsp in the Configuration utility...CVE-2014-40234.3 Medium
- f5 big-ip analyticsF5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it easier...CVE-2013-74087.5 High
- f5 enterprise manager, arx, big-ip access policy manager +16 more +18 moreThe rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1...CVE-2014-2927Public exploit9.3 High
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function...CVE-2014-7169In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 processes trailing strings after function definitions in the values of...CVE-2014-6271In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +23 more +25 moreThe rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before...CVE-2014-4027Fix available2.3 Low
- f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreCross-site scripting (XSS) vulnerability in list.jsp in the Configuration utility in F5 BIG-IP...CVE-2014-39594.3 Medium
- f5 big-ip edge gateway, big-ip access policy manager, big-ip application security manager +6 more +8 moreThe iControl API in F5 BIG-IP LTM, APM, ASM, GTM, Link Controller, and PSM 10.0.0 through 10.2.4...CVE-2014-2928Public exploitEPSS 40.1%7.1 High
- f5 big-ip edge gateway, firepass, big-ip access policy manager +2 moreThe Edge Client components in F5 BIG-IP APM 10.x, 11.x, 12.x, 13.x, and 14.x, BIG-IP Edge Gateway...CVE-2013-60244.4 Medium
- f5 big-ip access policy manager, big-ip analytics, big-ip application security manager +7 more +9 moreMultiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM...CVE-2012-30007.5 High
- f5 big-ip configuration utilityXML External Entity (XXE) vulnerability in sam/admin/vpe2/public/php/server.php in F5 BIG-IP 10.0...CVE-2012-2997Public exploit4.0 Medium
- f5 big-ip access policy manager, big-ip application security manager, big-ip edge gateway +6 more +8 moreThe Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, APM, ASM, Edge Gateway, GTM, Link...CVE-2013-60167.8 High
- f5 big-ip access policy managerCross-site scripting (XSS) vulnerability in the access policy logout page (logout.inc) in F5 BIG...CVE-2013-59764.3 Medium
- f5 big-ip access policy managerThe access policy logon page (logon.inc) in F5 BIG-IP APM 11.1.0 through 11.2.1 allows remote...CVE-2013-59754.3 Medium
- f5 firepass, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreDirectory traversal vulnerability in an unspecified signed Java applet in the client-side...CVE-2013-01509.3 High
- oracle mysql, canonical ubuntu linux, debian linux +18 more +20 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5...CVE-2012-31639.0 High
- f5 enterprise manager, big-ip 1000, big-ip 11000 +22 more +24 moreF5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1...CVE-2012-1493Public exploitEPSS 63.0%7.8 High
- debian linux, linux kernel, canonical ubuntu linux +26 more +28 moreThe n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not...CVE-2014-0196In KEVPublic exploitFix availableEPSS 20.3%6.9 Medium
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +24 more +26 moreThe sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6...CVE-2014-0101Fix available7.8 High
- linux kernel, f5 arx, big-ip access policy manager +12 more +14 moreThe (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4...CVE-2011-31889.1 Critical
- f5 big-ip application security manager, big-ip protocol security manager, big-ip protocol security module +2 moreBuffer overflow in the bd daemon in F5 Networks BIG-IP Application Security Manager (ASM) 9.4.4...CVE-2009-44207.8 High
- f5 big-ipWeb Management Console Cross-site request forgery (CSRF) vulnerability in the web management...CVE-2008-7032Public exploit6.8 Medium
- apache mod jk, f5 big-ip +1 moreMultiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module...CVE-2007-6258Public exploitEPSS 41.5%7.5 High
- f5 big-ip application security managerCross-site scripting (XSS) vulnerability in dms/policy/rep_request.php in F5 BIG-IP Application...CVE-2008-0539Public exploit4.3 Medium