Skip to contentF5 Big-ip Webaccelerator vulnerabilities
- f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreOn F5 BIG-IP versions 13.0.0 - 13.1.0.3, attackers may be able to disrupt services on the BIG-IP...CVE-2018-55027.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +10 more +12 moreSSL virtual servers in F5 BIG-IP systems 10.x before 10.2.4 HF9, 11.x before 11.2.1 HF12, 11.3.0...CVE-2014-40245.9 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 moreIn some circumstances, on F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, any 11.6.x or 11.5...CVE-2018-55015.9 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 moreOn F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, every Multipath TCP ...CVE-2018-55005.9 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM,...CVE-2017-61648.1 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM,...CVE-2017-61517.5 High
- f5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, f5 big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM,...CVE-2017-61615.3 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +14 more +16 moreA stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change...CVE-2016-74695.4 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 moreBuffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2...CVE-2014-60314.9 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user...CVE-2016-92507.5 High
- f5 enterprise manager, iworkflow, big-ip access policy manager +20 more +22 moreAn attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in...CVE-2017-61287.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +12 more +14 moreThe Traffic Management Microkernel (TMM) in F5 BIG-IP before 11.5.4 HF3, 11.6.x before 11.6.1 HF2...CVE-2016-92527.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +12 more +14 moreIn some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell...CVE-2016-74745.5 Medium
- f5 big-ip analytics, big-ip edge gateway, big-ip access policy manager +11 more +13 moreThe RESOLV::lookup iRule command in F5 BIG-IP LTM, APM, ASM, and Link Controller 10.2.1 through...CVE-2016-68767.5 High
- f5 big-ip edge gateway, big-iq centralized management, big-iq cloud +19 more +21 moreF5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x...CVE-2016-50229.8 Critical
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +10 more +12 moreVirtual servers in F5 BIG-IP systems 11.2.1 HF11 through HF15, 11.4.1 HF4 through HF10, 11.5.3...CVE-2016-50237.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 moreThe Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x,...CVE-2016-14974.9 Medium
- f5 big-ip edge gateway, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreThe default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM,...CVE-2016-57367.5 High
- f5 big-ip edge gateway, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreThe Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x...CVE-2015-80227.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 moreF5 BIG-IP before 12.0.0 HF3 allows remote authenticated users to modify the account configuration...CVE-2016-50208.8 High
- f5 big-ip edge gateway, big-iq centralized management, big-iq cloud +18 more +20 moreF5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1...CVE-2015-80995.9 Medium
- f5 big-ip edge gateway, big-iq cloud, big-ip access policy manager +15 more +17 moreF5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1...CVE-2016-20847.4 High
- f5 big-ip edge gateway, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreIncomplete blacklist vulnerability in the Configuration utility in F5 BIG-IP LTM, Analytics, APM,...CVE-2015-80214.3 Medium
- f5 big-ip analytics, big-ip edge gateway, big-iq cloud +15 more +17 moreMemory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2...CVE-2015-55167.5 High
- f5 big-ip edge gateway, big-iq centralized management, big-iq cloud +17 more +19 moredcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0...CVE-2015-73937.4 High
- f5 big-ip edge gateway, big-iq adc, big-iq cloud +15 more +17 moreThe iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0...CVE-2015-3628Public exploitEPSS 69.3%9.0 High
- f5 big-ip analytics, big-ip edge gateway, big-iq adc +15 more +17 moreThe datastor kernel module in F5 BIG-IP Analytics, APM, ASM, Link Controller, and LTM 11.1.0...CVE-2015-73949.0 High
- f5 big-ip analytics, big-ip edge gateway, big-ip access policy manager +10 more +12 moreThe vCMP host in F5 BIG-IP Analytics, APM, ASM, GTM, Link Controller, and LTM 11.0.0 before 11.6...CVE-2015-65466.1 Medium
- f5 big-ip edge gateway, big-ip advanced firewall manager, big-ip analytics +7 more +9 moreThe FastL4 virtual server in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller,...CVE-2015-46385.0 Medium
- f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreDirectory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and...CVE-2015-4040Public exploit4.0 Medium
- ipsec-tools, canonical ubuntu linux, debian linux +22 more +24 moreracoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL...CVE-2015-4047Fix available7.8 High
- f5 big-iq cloud, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreThe SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0...CVE-2014-8730EPSS 13.8%4.3 Medium
- f5 enterprise manager, big-ip advanced firewall manager, big-ip analytics +10 more +12 moreMultiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM,...CVE-2014-60325.5 Medium
- f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreCross-site scripting (XSS) vulnerability in tmui/dashboard/echo.jsp in the Configuration utility...CVE-2014-40234.3 Medium
- f5 enterprise manager, arx, big-ip access policy manager +16 more +18 moreThe rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1...CVE-2014-2927Public exploit9.3 High
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function...CVE-2014-7169In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 processes trailing strings after function definitions in the values of...CVE-2014-6271In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +23 more +25 moreThe rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before...CVE-2014-4027Fix available2.3 Low
- f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreCross-site scripting (XSS) vulnerability in list.jsp in the Configuration utility in F5 BIG-IP...CVE-2014-39594.3 Medium
- f5 big-ip edge gateway, big-ip access policy manager, big-ip application security manager +6 more +8 moreThe iControl API in F5 BIG-IP LTM, APM, ASM, GTM, Link Controller, and PSM 10.0.0 through 10.2.4...CVE-2014-2928Public exploitEPSS 40.1%7.1 High
- f5 big-ip access policy manager, big-ip analytics, big-ip application security manager +7 more +9 moreMultiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM...CVE-2012-30007.5 High
- f5 big-ip access policy manager, big-ip application security manager, big-ip edge gateway +6 more +8 moreThe Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, APM, ASM, Edge Gateway, GTM, Link...CVE-2013-60167.8 High
- f5 firepass, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreDirectory traversal vulnerability in an unspecified signed Java applet in the client-side...CVE-2013-01509.3 High
- oracle mysql, canonical ubuntu linux, debian linux +18 more +20 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5...CVE-2012-31639.0 High
- debian linux, linux kernel, canonical ubuntu linux +26 more +28 moreThe n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not...CVE-2014-0196In KEVPublic exploitFix availableEPSS 20.3%6.9 Medium
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +24 more +26 moreThe sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6...CVE-2014-0101Fix available7.8 High
- linux kernel, f5 arx, big-ip access policy manager +12 more +14 moreThe (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4...CVE-2011-31889.1 Critical