Browse CVEs

MEDIUM 5.4 CVE-2022-28707 On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, and 14.1.x versions prior to 14.1.4.6, a stored cross-site scripti… Big Ip Access Policy Manager Mitigation only Fix from $1,6002022-05-05 MEDIUM 6.8 CVE-2022-27878 On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0… Big Ip Access Policy Manager Mitigation only Fix from $1,6002022-05-05 HIGH 7.5 CVE-2022-26517 On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when the BIG-IP CGNAT Large S… Big Ip Access Policy Manager Mitigation only Fix from $1,9502022-05-05 HIGH 7.5 CVE-2022-26890 On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prior to 16.1.2.1, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and 13… Big Ip Access Policy Manager Mitigation only Fix from $1,9502022-05-05 HIGH 7.5 CVE-2022-27189 On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5… Big Ip Access Policy Manager Mitigation only Fix from $1,9502022-05-05 MEDIUM 6.5 CVE-2022-27495 On all versions 1.3.x (fixed in 1.4.0) NGINX Service Mesh control plane endpoints are exposed to the cluster overlay network. Note: Software versions… Nginx Service Mesh Mitigation only Fix from $1,6002022-05-05 MEDIUM 5.3 CVE-2022-27181 On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13… Big Ip Access Policy Manager Mitigation only Fix from $1,6002022-05-05 MEDIUM 5.3 CVE-2022-27182 On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, and 14.1.x versions prior to 14.1.4.6, when BIG-IP packet filters … Big Ip Access Policy Manager No fix yet Fix from $1,6002022-05-05 HIGH 7.5 CVE-2022-26071 On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5… Big Ip Access Policy Manager Mitigation only Fix from $1,9502022-05-05 HIGH 7.5 CVE-2022-26370 On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, and 14.1.x versions prior to 14.1.4.6, when a Session Initiation Pro… Big Ip Access Policy Manager Mitigation only Fix from $1,9502022-05-05 HIGH 7.5 CVE-2022-26372 On F5 BIG-IP 15.1.x versions prior to 15.1.0.2, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11… Big Ip Access Policy Manager Mitigation only Fix from $1,9502022-05-05 MEDIUM 5.3 CVE-2022-25990 On 1.0.x versions prior to 1.0.1, systems running F5OS-A software may expose certain registry ports externally. Note: Software versions which have re… F5os A No fix yet Fix from $1,6002022-05-05 MEDIUM 5.3 CVE-2022-26130 On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13… Big Ip Access Policy Manager Mitigation only Fix from $1,6002022-05-05 HIGH 7.2 CVE-2022-23009 On BIG-IQ Centralized Management 8.x before 8.1.0, an authenticated administrative role user on a BIG-IQ managed BIG-IP device can access other BIG-I… Big Iq Centralized Management Mitigation only Fix from $1,9502022-01-25 HIGH 7.5 CVE-2020-27713 In certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied to a virtual server and the BIG-IP system receives … Big Ip Advanced Firewall Manager Mitigation only Fix from $1,9502020-12-11 HIGH 7.5 CVE-2020-5852 Undisclosed traffic patterns received may cause a disruption of service to the Traffic Management Microkernel (TMM). This vulnerability affects TMM t… Big Ip Local Traffic Manager Mitigation only Fix from $1,9502020-01-14 HIGH 7.8 CVE-2018-5547 Windows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by default uses Legacy logon mode which uses a SYSTEM … Big Ip Access Policy Manager Client Mitigation only Fix from $1,9502018-08-17 HIGH 7.5 CVE-2018-5510 On F5 BIG-IP 11.5.4 HF4-11.5.5, the Traffic Management Microkernel (TMM) may restart when processing a specific sequence of packets on IPv6 virtual s… Big Ip Local Traffic Manager Mitigation only Fix from $1,9502018-04-13 HIGH 7.2 CVE-2018-5511EPSS 15% On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), als… Big Ip Local Traffic Manager No fix yet Fix from $1,9502018-04-13 HIGH 7.5 CVE-2016-7472 F5 BIG-IP ASM version 12.1.0 - 12.1.1 may allow remote attackers to cause a denial of service (DoS) via a crafted HTTP request. Big Ip Application Security Manager Mitigation only Fix from $1,9502018-04-03 MEDIUM 6.8 CVE-2017-6169 In versions 13.0.0, 12.0.0-12.1.3, or 11.6.0-11.6.2, an F5 BIG-IP virtual server using the URL categorization feature may cause the Traffic Managemen… Big Ip Policy Enforcement Manager Mitigation only Fix from $1,6002018-02-06 HIGH 7.6 CVE-2017-0301 In F5 BIG-IP APM software versions 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 and 12.1.2 BIG-IP APM portal access… Big Ip Access Policy Manager Mitigation only Fix from $1,9502017-12-21 HIGH 7.5 CVE-2017-6129 In F5 BIG-IP APM software version 13.0.0 and 12.1.2, in some circumstances, APM tunneled VPN flows can cause a VPN/PPP connflow to be prematurely fre… Big Ip Access Policy Manager Mitigation only Fix from $1,9502017-12-21 HIGH 7.5 CVE-2017-6135 In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, a slow memory leak as a result o… Big Ip Local Traffic Manager Mitigation only Fix from $1,9502017-12-21 HIGH 7.5 CVE-2017-6140 On the BIG-IP 2000s, 2200s, 4000s, 4200v, i5600, i5800, i7600, i7800, i10600,i10800, and VIPRION 4450 blades, running version 11.5.0, 11.5.1, 11.5.2,… Big Ip Local Traffic Manager Mitigation only Fix from $1,9502017-12-21 HIGH 7.5 CVE-2017-6151 In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, un… Big Ip Local Traffic Manager Mitigation only Fix from $1,9502017-12-21 MEDIUM 5.9 CVE-2017-6139 In F5 BIG-IP APM software version 13.0.0 and 12.1.2, under rare conditions, the BIG-IP APM system appends log details when responding to client reque… Big Ip Access Policy Manager Mitigation only Fix from $1,6002017-12-21 MEDIUM 5.4 CVE-2017-0304 A SQL injection vulnerability exists in the BIG-IP AFM management UI on versions 12.0.0, 12.1.0, 12.1.1, 12.1.2 and 13.0.0 that may allow a copy of t… Big Ip Advanced Firewall Manager Mitigation only Fix from $1,6002017-12-21 HIGH 7.5 CVE-2017-0303 In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 1… Big Ip Local Traffic Manager Mitigation only Fix from $1,9502017-10-27 MEDIUM 5.9 CVE-2017-6159 F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 are vulnera… Big Ip Local Traffic Manager Mitigation only Fix from $1,6002017-10-27