F5 Big-ip Protocol Security Module vulnerabilities

• f5 arx, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 more The HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without... CVE-2013-3587 5.9 MediumFebruary 21, 2020
• ntp, f5 big-ip access policy manager, big-ip advanced firewall manager +22 more +24 more An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a... CVE-2014-5209 Fix available 5.3 MediumJanuary 8, 2020
• big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +13 more +15 more On BIG-IP 11.5.1-11.6.3, 12.1.0-12.1.3, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2, under certain... CVE-2019-6608 5.9 MediumMarch 28, 2019
• big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +13 more +15 more On BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3.6, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2,... CVE-2019-6604 6.8 MediumMarch 28, 2019
• f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 more In BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1 or Enterprise Manager 3.1.1, when authenticated... CVE-2018-15327 7.2 HighOctober 31, 2018
• f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 more In BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, iControl and TMSH usage by authenticated users may... CVE-2018-15325 4.3 MediumOctober 31, 2018
• f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 more On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, in certain circumstances, when processing traffic... CVE-2018-15323 5.9 MediumOctober 31, 2018
• f5 big-iq centralized management, big-iq cloud and orchestration, enterprise manager +15 more +17 more On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6,... CVE-2018-15322 6.5 MediumOctober 31, 2018
• f5 big-iq centralized management, big-iq cloud and orchestration, enterprise manager +15 more +17 more When BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6,... CVE-2018-15321 4.9 MediumOctober 31, 2018
• f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 more On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, undisclosed traffic patterns may lead to denial of... CVE-2018-15320 7.5 HighOctober 31, 2018
• f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 more On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to... CVE-2018-15319 7.5 HighOctober 31, 2018
• f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 more In BIG-IP 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, or 12.1.3.4-12.1.3.6, If an MPTCP connection... CVE-2018-15318 7.5 HighOctober 31, 2018
• f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 more In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an attacker... CVE-2018-15317 7.5 HighOctober 31, 2018
• f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +6 more +8 more Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the... CVE-2016-7475 7.5 HighOctober 8, 2018
• f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip application acceleration manager +9 more +11 more On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or... CVE-2017-6155 7.5 HighApril 13, 2018
• f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +10 more +12 more SSL virtual servers in F5 BIG-IP systems 10.x before 10.2.4 HF9, 11.x before 11.2.1 HF12, 11.3.0... CVE-2014-4024 5.9 MediumMarch 19, 2018
• f5 networks, inc. big-ip ltm, aam, afm, apm, asm, link controller, pem, psm, f5 big-ip access policy manager, big-ip advanced firewall manager +6 more +8 more In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM software version 12.0.0 to 12.1.2... CVE-2017-6163 5.9 MediumOctober 27, 2017
• f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +14 more +16 more A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change... CVE-2016-7469 5.4 MediumJune 9, 2017
• f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 more Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2... CVE-2014-6031 4.9 MediumJune 8, 2017
• f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip application acceleration manager +8 more +10 more The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, APM, ASM, GTM, Link... CVE-2016-7476 7.5 HighMay 11, 2017
• f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 more In F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user... CVE-2016-9250 7.5 HighMay 10, 2017
• f5 enterprise manager, iworkflow, big-ip access policy manager +20 more +22 more An attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in... CVE-2017-6128 7.5 HighMay 1, 2017
• f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +12 more +14 more The Traffic Management Microkernel (TMM) in F5 BIG-IP before 11.5.4 HF3, 11.6.x before 11.6.1 HF2... CVE-2016-9252 7.5 HighMarch 27, 2017
• f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +12 more +14 more In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell... CVE-2016-7474 5.5 MediumMarch 27, 2017
• f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +8 more +10 more An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4... CVE-2016-7468 5.9 MediumMarch 23, 2017
• f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +8 more +10 more A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session... CVE-2016-9244 Public exploit EPSS 74.0% 7.5 HighFebruary 9, 2017
• f5 big-ip analytics, big-ip edge gateway, big-ip access policy manager +11 more +13 more The RESOLV::lookup iRule command in F5 BIG-IP LTM, APM, ASM, and Link Controller 10.2.1 through... CVE-2016-6876 7.5 HighSeptember 7, 2016
• f5 big-ip edge gateway, big-iq centralized management, big-iq cloud +19 more +21 more F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x... CVE-2016-5022 9.8 CriticalSeptember 7, 2016
• f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +10 more +12 more Virtual servers in F5 BIG-IP systems 11.2.1 HF11 through HF15, 11.4.1 HF4 through HF10, 11.5.3... CVE-2016-5023 7.5 HighAugust 26, 2016
• f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 more The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x,... CVE-2016-1497 4.9 MediumAugust 26, 2016
• f5 big-ip edge gateway, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 more The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM,... CVE-2016-5736 7.5 HighAugust 19, 2016
• f5 big-ip edge gateway, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 more The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x... CVE-2015-8022 7.5 HighAugust 19, 2016
• f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 more F5 BIG-IP before 12.0.0 HF3 allows remote authenticated users to modify the account configuration... CVE-2016-5020 8.8 HighJune 30, 2016
• f5 big-ip edge gateway, big-iq centralized management, big-iq cloud +18 more +20 more F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1... CVE-2015-8099 5.9 MediumMay 13, 2016
• f5 big-ip edge gateway, big-iq cloud, big-ip access policy manager +15 more +17 more F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1... CVE-2016-2084 7.4 HighApril 13, 2016
• f5 big-ip edge gateway, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 more Incomplete blacklist vulnerability in the Configuration utility in F5 BIG-IP LTM, Analytics, APM,... CVE-2015-8021 4.3 MediumApril 12, 2016
• f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +7 more +9 more The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM,... CVE-2015-8240 7.5 HighApril 11, 2016
• f5 big-ip analytics, big-ip edge gateway, big-iq cloud +15 more +17 more Memory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2... CVE-2015-5516 7.5 HighJanuary 20, 2016
• f5 big-ip edge gateway, big-iq centralized management, big-iq cloud +17 more +19 more dcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0... CVE-2015-7393 7.4 HighJanuary 12, 2016
• f5 big-ip edge gateway, big-iq adc, big-iq cloud +15 more +17 more The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0... CVE-2015-3628 Public exploit EPSS 69.3% 9.0 HighDecember 7, 2015
• f5 big-ip analytics, big-ip edge gateway, big-iq adc +15 more +17 more The datastor kernel module in F5 BIG-IP Analytics, APM, ASM, Link Controller, and LTM 11.1.0... CVE-2015-7394 9.0 HighNovember 6, 2015
• f5 big-ip analytics, big-ip edge gateway, big-ip access policy manager +10 more +12 more The vCMP host in F5 BIG-IP Analytics, APM, ASM, GTM, Link Controller, and LTM 11.0.0 before 11.6... CVE-2015-6546 6.1 MediumNovember 6, 2015
• f5 big-ip edge gateway, big-ip advanced firewall manager, big-ip analytics +7 more +9 more The FastL4 virtual server in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller,... CVE-2015-4638 5.0 MediumSeptember 18, 2015
• f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 more Directory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and... CVE-2015-4040 Public exploit 4.0 MediumSeptember 17, 2015
• f5 big-iq cloud, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 more The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0... CVE-2014-8730 EPSS 13.8% 4.3 MediumDecember 10, 2014
• f5 enterprise manager, big-ip advanced firewall manager, big-ip analytics +10 more +12 more Multiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM,... CVE-2014-6032 5.5 MediumNovember 1, 2014
• f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 more Cross-site scripting (XSS) vulnerability in tmui/dashboard/echo.jsp in the Configuration utility... CVE-2014-4023 4.3 MediumOctober 28, 2014
• f5 enterprise manager, arx, big-ip access policy manager +16 more +18 more The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1... CVE-2014-2927 Public exploit 9.3 HighOctober 15, 2014
• gnu bash, apple mac os x, arista eos +71 more +73 more GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function... CVE-2014-7169 In KEVPublic exploitFix available EPSS 99.9% 9.8 CriticalSeptember 25, 2014
• gnu bash, apple mac os x, arista eos +71 more +73 more GNU Bash through 4.3 processes trailing strings after function definitions in the values of... CVE-2014-6271 In KEVPublic exploitFix available EPSS 100.0% 9.8 CriticalSeptember 24, 2014
• Show olderLoading…