F5 Enterprise Manager vulnerabilities

• f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +15 more +17 more On BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11... CVE-2020-5854 5.9 MediumFebruary 6, 2020
• ntp, f5 big-ip access policy manager, big-ip advanced firewall manager +22 more +24 more An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a... CVE-2014-5209 Fix available 5.3 MediumJanuary 8, 2020
• f5 enterprise manager, iworkflow, big-ip, big-iq, iworkflow, enterprise manager +14 more +16 more On BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11... CVE-2019-19151 5.5 MediumDecember 23, 2019
• f5 big-ip asm, big-iq, enterprise manager +3 more +5 more On BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and... CVE-2019-6665 9.4 CriticalNovember 27, 2019
• f5 enterprise manager, iworkflow, big-ip, big-iq, iworkflow, enterprise manager +14 more +16 more The BIG-IP 15.0.0-15.0.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1,... CVE-2019-6663 5.5 MediumNovember 15, 2019
• canonical ubuntu linux, debian linux, f5 big-ip access policy manager +775 more +777 more Improper invalidation for page table updates by a virtual guest operating system for multiple... CVE-2018-12207 Fix available 6.5 MediumNovember 12, 2019
• tcpdump, apple mac os x, debian linux +20 more +22 more The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c... CVE-2018-14880 Public exploitFix available 7.5 HighSeptember 30, 2019
• tcpdump, apple mac os x, debian linux +20 more +22 more The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print(). CVE-2018-14468 Fix available 7.5 HighSeptember 30, 2019
• f5 enterprise manager, iworkflow, big-ip, big-iq, iworkflow, enterprise manager +14 more +16 more In BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.5.1-11.6... CVE-2019-6651 5.3 MediumSeptember 25, 2019
• f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +12 more +14 more F5 BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6... CVE-2019-6649 9.1 CriticalSeptember 20, 2019
• f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 more On BIG-IP 11.5.2-11.6.4 and Enterprise Manager 3.1.1, REST users with guest privileges may be... CVE-2019-6646 8.8 HighSeptember 4, 2019
• f5 enterprise manager, iworkflow, big-ip, big-iq, iworkflow, enterprise manager +14 more +16 more In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6... CVE-2019-6642 8.8 HighJuly 1, 2019
• isc bind, bind 9, f5 big-ip access policy manager +15 more +17 more A race condition when discarding malformed packets can cause BIND to exit with an assertion failure CVE-2019-6471 Fix available 5.9 MediumJune 19, 2019
• linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +18 more +20 more Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This... CVE-2019-11479 Fix available EPSS 91.3% 5.3 MediumJune 17, 2019
• isc bind, bind 9, f5 big-ip access policy manager +15 more +17 more Limiting simultaneous TCP clients was ineffective CVE-2018-5743 Fix available 7.5 HighApril 24, 2019
• f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 more In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or... CVE-2019-6598 4.3 MediumMarch 13, 2019
• f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 more In BIG-IP 13.0.0-13.1.1.1, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise... CVE-2019-6597 7.2 HighMarch 13, 2019
• f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 more On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, or Enterprise Manager 3.1.1, when... CVE-2018-15329 7.2 HighDecember 20, 2018
• f5 enterprise manager, iworkflow, big-ip access policy manager +14 more +16 more On BIG-IP 14.0.x, 13.x, 12.x, and 11.x, Enterprise Manager 3.1.1, BIG-IQ 6.x, 5.x, and 4.x, and... CVE-2018-15328 7.5 HighDecember 12, 2018
• f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 more In BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1 or Enterprise Manager 3.1.1, when authenticated... CVE-2018-15327 7.2 HighOctober 31, 2018
• f5 big-iq centralized management, big-iq cloud and orchestration, enterprise manager +15 more +17 more On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6,... CVE-2018-15322 6.5 MediumOctober 31, 2018
• f5 big-iq centralized management, big-iq cloud and orchestration, enterprise manager +15 more +17 more When BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6,... CVE-2018-15321 4.9 MediumOctober 31, 2018
• linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +25 more +27 more An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An... CVE-2018-14634 In KEVPublic exploitFix available EPSS 14.7% 7.8 HighSeptember 25, 2018
• f5 big-iq centralized management, big-iq cloud and orchestration, enterprise manager +4 more +6 more On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise... CVE-2018-5540 4.4 MediumJuly 19, 2018
• f5 enterprise manager, big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator), big-ip access policy manager +12 more +14 more On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1... CVE-2018-5523 7.2 HighJune 1, 2018
• f5 big-iq centralized management, big-iq cloud and orchestration, iworkflow +16 more +18 more On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ... CVE-2018-5516 4.7 MediumMay 2, 2018
• f5 big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe), big-ip access policy manager, big-ip advanced firewall manager +14 more +16 more On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands... CVE-2018-5511 Public exploit EPSS 14.2% 7.2 HighApril 13, 2018
• f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +14 more +16 more A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change... CVE-2016-7469 5.4 MediumJune 9, 2017
• f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 more Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2... CVE-2014-6031 4.9 MediumJune 8, 2017
• f5 enterprise manager, iworkflow, big-ip access policy manager +20 more +22 more An attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in... CVE-2017-6128 7.5 HighMay 1, 2017
• f5 big-ip edge gateway, big-iq centralized management, big-iq cloud +19 more +21 more F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x... CVE-2016-5022 9.8 CriticalSeptember 7, 2016
• f5 big-ip edge gateway, big-iq centralized management, big-iq cloud +18 more +20 more F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1... CVE-2015-8099 5.9 MediumMay 13, 2016
• f5 big-ip analytics, big-ip edge gateway, big-iq cloud +15 more +17 more Memory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2... CVE-2015-5516 7.5 HighJanuary 20, 2016
• f5 big-ip edge gateway, big-iq adc, big-iq cloud +15 more +17 more The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0... CVE-2015-3628 Public exploit EPSS 69.3% 9.0 HighDecember 7, 2015
• f5 big-ip analytics, big-ip edge gateway, big-iq adc +15 more +17 more The datastor kernel module in F5 BIG-IP Analytics, APM, ASM, Link Controller, and LTM 11.1.0... CVE-2015-7394 9.0 HighNovember 6, 2015
• f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 more Directory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and... CVE-2015-4040 Public exploit 4.0 MediumSeptember 17, 2015
• ipsec-tools, canonical ubuntu linux, debian linux +22 more +24 more racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL... CVE-2015-4047 Fix available 7.8 HighMay 22, 2015
• f5 enterprise manager, big-ip advanced firewall manager, big-ip analytics +10 more +12 more Multiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM,... CVE-2014-6032 5.5 MediumNovember 1, 2014
• f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 more Cross-site scripting (XSS) vulnerability in tmui/dashboard/echo.jsp in the Configuration utility... CVE-2014-4023 4.3 MediumOctober 28, 2014
• f5 enterprise manager, arx, big-ip access policy manager +16 more +18 more The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1... CVE-2014-2927 Public exploit 9.3 HighOctober 15, 2014
• gnu bash, apple mac os x, arista eos +71 more +73 more GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function... CVE-2014-7169 In KEVPublic exploitFix available EPSS 99.9% 9.8 CriticalSeptember 25, 2014
• gnu bash, apple mac os x, arista eos +71 more +73 more GNU Bash through 4.3 processes trailing strings after function definitions in the values of... CVE-2014-6271 In KEVPublic exploitFix available EPSS 100.0% 9.8 CriticalSeptember 24, 2014
• linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +23 more +25 more The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before... CVE-2014-4027 Fix available 2.3 LowJune 23, 2014
• f5 enterprise manager, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 more Cross-site scripting (XSS) vulnerability in list.jsp in the Configuration utility in F5 BIG-IP... CVE-2014-3959 4.3 MediumJune 3, 2014
• oracle mysql, canonical ubuntu linux, debian linux +18 more +20 more Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5... CVE-2012-3163 9.0 HighOctober 17, 2012
• f5 enterprise manager, big-ip 1000, big-ip 11000 +22 more +24 more F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1... CVE-2012-1493 Public exploit EPSS 63.3% 7.8 HighJuly 9, 2012
• debian linux, linux kernel, canonical ubuntu linux +26 more +28 more The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not... CVE-2014-0196 In KEVPublic exploitFix available EPSS 20.3% 6.9 MediumApril 24, 2012
• linux kernel, canonical ubuntu linux, f5 big-ip access policy manager +24 more +26 more The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6... CVE-2014-0101 Fix available 7.8 HighApril 24, 2012
• linux kernel, f5 arx, big-ip access policy manager +12 more +14 more The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4... CVE-2011-3188 9.1 CriticalSeptember 8, 2011