Skip to contentF5 Big-iq vulnerabilities
- f5 big-iq, big-iq centralized management +1 moreIn BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization is not secure by TLS and may allow...CVE-2020-58699.1 Critical
- f5 big-iq, big-iq centralized management +1 moreIn BIG-IQ 6.0.0-7.0.0, a remote access vulnerability has been discovered that may allow a remote...CVE-2020-58689.8 Critical
- f5 big-ip, big-iq, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP 15.0.0-15.0.1.2, 14.1.0-14.1.2.2, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1...CVE-2020-58587.8 High
- f5 big-ip, big-iq, big-ip access policy manager, big-ip advanced firewall manager +10 more +12 moreOn BIG-IP 15.0.0-15.1.0.2, 14.1.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5.1, and 11.5.2-11.6.5.1...CVE-2020-58608.1 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +15 more +17 moreOn BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11...CVE-2020-58545.9 Medium
- ntp, f5 big-ip access policy manager, big-ip advanced firewall manager +22 more +24 moreAn Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a...CVE-2014-5209Fix available5.3 Medium
- f5 enterprise manager, iworkflow, big-ip, big-iq, iworkflow, enterprise manager +14 more +16 moreOn BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11...CVE-2019-191515.5 Medium
- f5 big-ip, big-iq, big-ip access policy manager +13 more +15 moreOn BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1...CVE-2019-66884.3 Medium
- f5 big-ip asm, big-iq, enterprise manager +3 more +5 moreOn BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and...CVE-2019-66659.4 Critical
- f5 enterprise manager, iworkflow, big-ip, big-iq, iworkflow, enterprise manager +14 more +16 moreThe BIG-IP 15.0.0-15.0.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1,...CVE-2019-66635.5 Medium
- canonical ubuntu linux, debian linux, f5 big-ip access policy manager +775 more +777 moreImproper invalidation for page table updates by a virtual guest operating system for multiple...CVE-2018-12207Fix available6.5 Medium
- tcpdump, apple mac os x, debian linux +20 more +22 moreThe OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c...CVE-2018-14880Public exploitFix available7.5 High
- tcpdump, apple mac os x, debian linux +20 more +22 moreThe FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().CVE-2018-14468Fix available7.5 High
- f5 big-iq, big-iq centralized management +1 moreThere is a Stored Cross Site Scripting vulnerability in the undisclosed page of a BIG-IQ 6.0.0-6...CVE-2019-66535.4 Medium
- f5 big-iq, big-iq centralized management +1 moreIn BIG-IQ 6.0.0-6.1.0, services for stats do not require authentication nor do they implement any...CVE-2019-66526.5 Medium
- f5 enterprise manager, iworkflow, big-ip, big-iq, iworkflow, enterprise manager +14 more +16 moreIn BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.5.1-11.6...CVE-2019-66515.3 Medium
- lodash, f5 big-ip access policy manager, big-ip advanced firewall manager +18 more +20 morePrototype Pollution in lodashCVE-2019-10744Public exploitFix available9.1 Critical
- f5 big-ip, big-iq, big-ip access policy manager +13 more +15 moreOn BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.5, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, 11.6.1-11.6.3.4,...CVE-2019-66217.2 High
- f5 big-ip, big-iq, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.5, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, and 11.5.1-11.6.4...CVE-2019-66207.2 High
- f5 enterprise manager, iworkflow, big-ip, big-iq, iworkflow, enterprise manager +14 more +16 moreIn BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6...CVE-2019-66428.8 High
- isc bind, bind 9, f5 big-ip access policy manager +15 more +17 moreA race condition when discarding malformed packets can cause BIND to exit with an assertion failureCVE-2019-6471Fix available5.9 Medium
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +18 more +20 moreJonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This...CVE-2019-11479Fix availableEPSS 91.3%5.3 Medium
- isc bind, bind 9, f5 big-ip access policy manager +15 more +17 moreLimiting simultaneous TCP clients was ineffectiveCVE-2018-5743Fix available7.5 High
- openssl, canonical ubuntu linux, debian linux +79 more +81 more0-byte record padding oracleCVE-2019-1559Fix availableEPSS 17.1%5.9 Medium
- f5 enterprise manager, iworkflow, big-ip access policy manager +14 more +16 moreOn BIG-IP 14.0.x, 13.x, 12.x, and 11.x, Enterprise Manager 3.1.1, BIG-IQ 6.x, 5.x, and 4.x, and...CVE-2018-153287.5 High
- f5 big-iq centralized management, big-iq cloud and orchestration, enterprise manager +15 more +17 moreOn BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6,...CVE-2018-153226.5 Medium
- f5 big-iq centralized management, big-iq cloud and orchestration, enterprise manager +15 more +17 moreWhen BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6,...CVE-2018-153214.9 Medium
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +25 more +27 moreAn integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An...CVE-2018-14634In KEVPublic exploitFix availableEPSS 14.7%7.8 High
- f5 big-iq centralized management, big-iq cloud and orchestration, enterprise manager +4 more +6 moreOn F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise...CVE-2018-55404.4 Medium
- f5 big-iq centralized management, big-iq cloud and orchestration, iworkflow +16 more +18 moreOn F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ...CVE-2018-55164.7 Medium
- f5 big-iq centralized managementA local user on F5 BIG-IQ Centralized Management 5.1.0-5.2.0 with the Access Manager role has...CVE-2017-61526.7 Medium
- f5 enterprise manager, iworkflow, big-ip access policy manager +20 more +22 moreAn attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in...CVE-2017-61287.5 High
- f5 big-ip edge gateway, big-iq centralized management, big-iq cloud +19 more +21 moreF5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x...CVE-2016-50229.8 Critical
- f5 big-iq centralized management, big-iq cloud, big-iq cloud and orchestration +13 more +15 moreThe iControl REST service in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and...CVE-2016-50214.9 Medium
- f5 big-ip edge gateway, big-iq centralized management, big-iq cloud +18 more +20 moreF5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1...CVE-2015-80995.9 Medium
- f5 big-ip edge gateway, big-iq cloud, big-ip access policy manager +15 more +17 moreF5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1...CVE-2016-20847.4 High
- f5 big-ip analytics, big-ip edge gateway, big-iq cloud +15 more +17 moreMemory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2...CVE-2015-55167.5 High
- f5 big-ip edge gateway, big-iq centralized management, big-iq cloud +17 more +19 moredcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0...CVE-2015-73937.4 High
- f5 big-ip edge gateway, big-iq adc, big-iq cloud +15 more +17 moreThe iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0...CVE-2015-3628Public exploitEPSS 69.3%9.0 High
- f5 big-ip analytics, big-ip edge gateway, big-iq adc +15 more +17 moreThe datastor kernel module in F5 BIG-IP Analytics, APM, ASM, Link Controller, and LTM 11.1.0...CVE-2015-73949.0 High
- f5 big-iq adc, big-iq cloud, big-ip access policy manager +9 more +11 moreMemory leak in the virtual server component in F5 Big-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM,...CVE-2015-50587.8 High
- f5 big-iq cloud, big-iq adc, big-iq device +1 more +3 moreThe REST API in F5 BIG-IQ Cloud, Device, and Security 4.4.0 and 4.5.0 before HF2 and ADC 4.5.0...CVE-2015-46374.3 Medium
- ipsec-tools, canonical ubuntu linux, debian linux +22 more +24 moreracoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL...CVE-2015-4047Fix available7.8 High
- f5 big-iq cloud, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreThe SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0...CVE-2014-8730EPSS 13.8%4.3 Medium
- f5 enterprise manager, arx, big-ip access policy manager +16 more +18 moreThe rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1...CVE-2014-2927Public exploit9.3 High
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function...CVE-2014-7169In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 processes trailing strings after function definitions in the values of...CVE-2014-6271In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +23 more +25 moreThe rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before...CVE-2014-4027Fix available2.3 Low
- f5 big-iqF5 BIG-IQ Cloud and Security 4.0.0 through 4.1.0 allows remote authenticated users to change the...CVE-2014-3220Public exploitEPSS 11.0%9.0 High
- debian linux, linux kernel, canonical ubuntu linux +26 more +28 moreThe n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not...CVE-2014-0196In KEVPublic exploitFix availableEPSS 20.3%6.9 Medium
- Show moreLoading…