Skip to contentF5 Big-ip vulnerabilities
- f5 big-ip access policy manager, big-ip access policy manager client, f5 networks, inc. big-ip (apm), big-ip apm clients, big-ip edge client +2 moreThe svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs...CVE-2018-153327.0 High
- f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1 or Enterprise Manager 3.1.1, when authenticated...CVE-2018-153277.2 High
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreIn some situations on BIG-IP APM 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, or 11.6.0-11...CVE-2018-153267.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreIn BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, iControl and TMSH usage by authenticated users may...CVE-2018-153254.3 Medium
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreOn BIG-IP APM 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, TMM may restart when processing a specially...CVE-2018-153245.9 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 moreOn BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, in certain circumstances, when processing traffic...CVE-2018-153235.9 Medium
- f5 big-iq centralized management, big-iq cloud and orchestration, enterprise manager +15 more +17 moreOn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6,...CVE-2018-153226.5 Medium
- f5 big-iq centralized management, big-iq cloud and orchestration, enterprise manager +15 more +17 moreWhen BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6,...CVE-2018-153214.9 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, undisclosed traffic patterns may lead to denial of...CVE-2018-153207.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to...CVE-2018-153197.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreIn BIG-IP 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, or 12.1.3.4-12.1.3.6, If an MPTCP connection...CVE-2018-153187.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreIn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an attacker...CVE-2018-153177.5 High
- f5 big-ip apm clients, big-ip edge client, big-ip access policy manager +2 more +4 moreIn F5 BIG-IP APM 13.0.0-13.1.1.1, APM Client 7.1.5-7.1.6, and/or Edge Client 7101-7160, the BIG...CVE-2018-153165.5 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a reflected Cross Site Scripting (XSS)...CVE-2018-153156.1 Medium
- f5 big-ip afm, big-ip advanced firewall manager +1 moreOn F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting...CVE-2018-153146.1 Medium
- f5 big-ip afm, big-ip advanced firewall manager +1 moreOn F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting...CVE-2018-153136.1 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, a reflected Cross-Site Scripting (XSS)...CVE-2018-153126.1 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreWhen F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing...CVE-2018-153115.9 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +6 more +8 moreUnder some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the...CVE-2016-74757.5 High
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +25 more +27 moreAn integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An...CVE-2018-14634In KEVPublic exploitFix availableEPSS 14.7%7.8 High
- f5 big-ip apm, big-ip access policy manager +1 moreOn BIG-IP APM 11.6.0-11.6.3.1, 12.1.0-12.1.3.3, 13.0.0, and 13.1.0-13.1.0.3, APMD may core when...CVE-2018-55497.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreOn BIG-IP APM 11.6.0-11.6.3, an insecure AES ECB mode is used for orig_uri parameter in an...CVE-2018-55486.1 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreA vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3...CVE-2018-153104.3 Medium
- f5 big-ip access policy manager client, f5 networks, inc. big-ip apm client for windows +1 moreWindows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by...CVE-2018-55477.8 High
- f5 big-ip access policy manager, big-ip access policy manager client, f5 networks, inc. big-ip apm client for linux +1 more +3 moreThe svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for...CVE-2018-55467.8 High
- debian linux, linux kernel, canonical ubuntu linux +48 more +50 moreThe Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packetsCVE-2018-5391Public exploitFix availableEPSS 32.1%7.5 High
- debian linux, linux kernel, a10networks advanced core operating system +35 more +37 moreLinux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of serviceCVE-2018-5390Fix availableEPSS 71.8%7.5 High
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreWhen the F5 BIG-IP APM 13.0.0-13.1.1 or 12.1.0-12.1.3 renders certain pages (pages with a logon...CVE-2018-55447.5 High
- f5 big-ip controller, f5 networks, inc. container connector +1 moreThe F5 BIG-IP Controller for Kubernetes 1.0.0-1.5.0 (k8s-bigip-crtl) passes BIG-IP username and...CVE-2018-55438.8 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreF5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.6, or 11.2.1-11.6.3.2 HTTPS health monitors do not...CVE-2018-55428.1 High
- f5 big-ip (asm), big-ip application security manager +1 moreWhen F5 BIG-IP ASM 13.0.0-13.1.0.1, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.5.1-11.5.6 is...CVE-2018-55417.5 High
- f5 big-ip (asm), big-ip application security manager +1 moreUnder certain conditions, on F5 BIG-IP ASM 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, 11...CVE-2018-55397.5 High
- f5 big-ip domain name system, big-ip global traffic manager, big-ip link controller +2 more +4 moreOn F5 BIG-IP DNS 13.1.0-13.1.0.7, 12.1.3-12.1.3.5, DNS Express / DNS Zones accept NOTIFY messages...CVE-2018-55383.7 Low
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip application acceleration manager +8 more +10 moreA remote attacker may be able to disrupt services on F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5,...CVE-2018-55375.3 Medium
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreA remote attacker via undisclosed measures, may be able to exploit an F5 BIG-IP APM 13.0.0-13.1.0...CVE-2018-55367.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreThrough undisclosed methods, on F5 BIG-IP 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or...CVE-2018-55317.4 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +7 more +9 moreF5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.1 virtual servers with HTTP/2...CVE-2018-55307.5 High
- f5 big-iq centralized management, big-iq cloud and orchestration, enterprise manager +4 more +6 moreOn F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise...CVE-2018-55404.4 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP...CVE-2018-55357.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreUnder certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1,...CVE-2018-55347.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreUnder certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6,...CVE-2018-55337.5 High
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within...CVE-2018-55325.3 Medium
- f5 big-ip access policy manager, big-ip edge, f5 networks, inc. big-ip apm client for linux and mac osx +2 moreThe svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for Linux and Mac OS X runs...CVE-2018-55297.8 High
- debian linux, linux kernel, canonical ubuntu linux +24 more +26 moreThe inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users...CVE-2018-13405Public exploitFix available7.8 High
- f5 big-ip access policy manager, f5 networks, inc. big-ip (apm) +1 moreUnder certain conditions, TMM may restart and produce a core file while processing APM data on...CVE-2018-55285.3 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn BIG-IP 13.1.0-13.1.0.7, a remote attacker using undisclosed methods against virtual servers...CVE-2018-55277.5 High
- f5 big-ip (asm), big-ip application security manager +1 moreUnder certain conditions, on F5 BIG-IP ASM 13.1.0-13.1.0.5, Behavioral DOS (BADOS) protection may...CVE-2018-55266.5 Medium
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreA local file vulnerability exists in the F5 BIG-IP Configuration utility on versions 13.0.0, 12.1...CVE-2018-55254.3 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +9 more +11 moreUnder certain conditions, on F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.6.1 HF2-11.6.3.1,...CVE-2018-55245.3 Medium
- f5 enterprise manager, big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +12 more +14 moreOn F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1...CVE-2018-55237.2 High
- Show moreLoading…