Browse CVEs

CRITICAL 9.8 CVE-2016-5700EPSS 6% Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 befo… Big Ip Policy Enforcement Manager Mitigation only Fix from $2,3002016-10-03 HIGH 7.5 CVE-2016-6876 The RESOLV::lookup iRule command in F5 BIG-IP LTM, APM, ASM, and Link Controller 10.2.1 through 10.2.4, 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, 11.… Big Ip Local Traffic Manager Mitigation only Fix from $1,9502016-09-07 CRITICAL 9.8 CVE-2016-5022 F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1 HF1… Big Ip Link Controller Mitigation only Fix from $2,3002016-09-07 HIGH 7.5 CVE-2016-5023 Virtual servers in F5 BIG-IP systems 11.2.1 HF11 through HF15, 11.4.1 HF4 through HF10, 11.5.3 through 11.5.4, 11.6.0 HF5 through HF7, and 12.0.0, wh… Big Ip Edge Gateway Mitigation only Fix from $1,9502016-08-26 HIGH 7.5 CVE-2016-5736 The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4.x, 11.5.… Big Ip Application Acceleration Manager Mitigation only Fix from $1,9502016-08-19 HIGH 7.5 CVE-2015-8022 The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10,… Big Ip Global Traffic Manager Mitigation only Fix from $1,9502016-08-19 HIGH 8.8 CVE-2016-5020 F5 BIG-IP before 12.0.0 HF3 allows remote authenticated users to modify the account configuration of users with the Resource Administration role and … Big Ip Wan Optimization Manager Mitigation only Fix from $1,9502016-06-30 MEDIUM 5.3 CVE-2016-3687 Open redirect vulnerability in F5 BIG-IP APM 11.2.1, 11.4.x, 11.5.x, and 11.6.x before 11.6.0 HF6 and Edge Gateway 11.2.1, when using multi-domain si… Big Ip Access Policy Manager Mitigation only Fix from $1,6002016-06-16 HIGH 7.5 CVE-2016-4545 Virtual servers in F5 BIG-IP 11.5.4, when SSL profiles are enabled, allow remote attackers to cause a denial of service (resource consumption and Tra… Big Ip Application Acceleration Manager Mitigation only Fix from $1,9502016-06-07 MEDIUM 5.9 CVE-2015-8099 F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, 11.6.x before 11.6.1, and … Big Ip Access Policy Manager Mitigation only Fix from $1,6002016-05-13 MEDIUM 5.9 CVE-2016-3686 The Single Sign-On (SSO) feature in F5 BIG-IP APM 11.x before 11.6.0 HF6 and BIG-IP Edge Gateway 11.0.0 through 11.3.0 might allow remote attackers t… Big Ip Edge Gateway Mitigation only Fix from $1,6002016-04-13 HIGH 7.4 CVE-2016-2084 F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2… Big Iq Security Mitigation only Fix from $1,9502016-04-13 HIGH 7.5 CVE-2015-8240 The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11… Big Ip Access Policy Manager Mitigation only Fix from $1,9502016-04-11 HIGH 7.5 CVE-2015-5516 Memory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, 11.3… Big Iq Application Delivery Controller Mitigation only Fix from $1,9502016-01-20 CRITICAL 9.8 CVE-2015-8611 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, and PEM 12.0.0 before HF1 on the 2000, 4000, 5000, 7000, and 10000 platforms do not … Big Ip Domain Name System Mitigation only Fix from $2,3002016-01-12 HIGH 7.4 CVE-2015-7393 dcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AAM 11.4.0 through 11.6.0 an… Big Iq Application Delivery Controller Mitigation only Fix from $1,9502016-01-12 CRITICAL 9.8 CVE-2015-8098 F5 BIG-IP APM 11.4.1 before 11.4.1 HF9, 11.5.x before 11.5.3, and 11.6.0 before 11.6.0 HF4 allow remote attackers to cause a denial of service or exe… Big Ip Access Policy Manager Mitigation only Fix from $2,3002016-01-12 HIGH 9.0 CVE-2015-3628EPSS 68% The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0 before 11.5.3 HF2 and 11.6.0 before 11.6.0 HF6, BIG-IP A… Big Iq Security No fix yet Fix from $1,9502015-12-07 HIGH 9.0 CVE-2015-7394 The datastor kernel module in F5 BIG-IP Analytics, APM, ASM, Link Controller, and LTM 11.1.0 before 12.0.0, BIG-IP AAM 11.4.0 before 12.0.0, BIG-IP A… Big Iq Device Mitigation only Fix from $1,9502015-11-06 MEDIUM 6.1 CVE-2015-6546 The vCMP host in F5 BIG-IP Analytics, APM, ASM, GTM, Link Controller, and LTM 11.0.0 before 11.6.0, BIG-IP AAM 11.4.0 before 11.6.0, BIG-IP AFM and P… Big Ip Application Acceleration Manager Mitigation only Fix from $1,6002015-11-06 MEDIUM 5.0 CVE-2015-4638 The FastL4 virtual server in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.3.0 through 11.5.2 and 11.6.0 through 11.… Big Ip Advanced Firewall Manager Mitigation only Fix from $1,6002015-09-18 HIGH 7.8 CVE-2015-5058 Memory leak in the virtual server component in F5 Big-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.5.x before 11.5.1 HF10,… Big Ip Access Policy Manager Mitigation only Fix from $1,9502015-08-24 MEDIUM 5.5 CVE-2014-6032 Multiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM, ASM, GTM, and Link Controller 11.0 through 11.6.0 a… Big Ip Protocol Security Module No fix yet Fix from $1,6002014-11-01 HIGH 7.5 CVE-2013-7408 F5 BIG-IP Analytics 11.x before 11.4.0 uses a predictable session cookie, which makes it easier for remote attackers to have unspecified impact by gu… Big Ip Analytics No fix yet Fix from $1,9502014-10-26 HIGH 9.3 CVE-2014-2927EPSS 8% The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before HF7, 11.3.0 before HF9, and … Arx No fix yet Fix from $1,9502014-10-15 MEDIUM 6.5 CVE-2014-2949 SQL injection vulnerability in the web service in F5 ARX Data Manager 3.0.0 through 3.1.0 allows remote authenticated users to execute arbitrary SQL … Arx Data Manager Mitigation only Fix from $1,6002014-06-18 HIGH 7.1 CVE-2014-2928EPSS 39% The iControl API in F5 BIG-IP LTM, APM, ASM, GTM, Link Controller, and PSM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, BIG-IP AAM 11.4.0 through… Big Ip Webaccelerator No fix yet Fix from $1,9502014-05-12 HIGH 9.0 CVE-2014-3220EPSS 11% F5 BIG-IQ Cloud and Security 4.0.0 through 4.1.0 allows remote authenticated users to change the password of arbitrary users via the name parameter i… Big Iq No fix yet Fix from $1,9502014-05-05 HIGH 7.5 CVE-2012-3000 Multiple SQL injection vulnerabilities in sam/admin/reports/php/saveSettings.php in the (1) APM WebGUI in F5 BIG-IP LTM, GTM, ASM, Link Controller, P… Big Ip Webaccelerator No fix yet Fix from $1,9502014-01-30 HIGH 7.8 CVE-2013-6016 The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, APM, ASM, Edge Gateway, GTM, Link Controller, and WOM 10.0.0 through 10.2.2 and 11.0.0; An… Big Ip Global Traffic Manager Mitigation only Fix from $1,9502013-10-26