Vulnerability index

Browse CVEs

865 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Big Ip Local Traffic Manager HIGH 7.5
CVE-2017-6140

On the BIG-IP 2000s, 2200s, 4000s, 4200v, i5600, i5800, i7600, i7800, i10600,i10800, and VIPRION 4450 blades, running version 11.5.0, 11.5.1, 11.5.2,…

Mitigation only
Fix from $1,950 2017-12-21
Big Ip Local Traffic Manager HIGH 7.5
CVE-2017-6151

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, un…

Mitigation only
Fix from $1,950 2017-12-21
Big Ip Local Traffic Manager HIGH 7.5
CVE-2017-6167

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, race conditions i…

Fix: after 12.1.2
Fix from $1,950 2017-12-21
Big Ip Local Traffic Manager MEDIUM 6.5
CVE-2017-6134

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, 12.1.0 - 12.1.2 and 11.5.1 - 11.…

Fix: after 12.1.2
Fix from $1,600 2017-12-21
Big Ip Local Traffic Manager MEDIUM 5.9
CVE-2017-6136

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.0.0 - 12.1.2, undisclosed …

Fix: after 12.1.2
Fix from $1,600 2017-12-21
Big Ip Access Policy Manager MEDIUM 5.9
CVE-2017-6139

In F5 BIG-IP APM software version 13.0.0 and 12.1.2, under rare conditions, the BIG-IP APM system appends log details when responding to client reque…

Mitigation only
Fix from $1,600 2017-12-21
Big Ip Advanced Firewall Manager MEDIUM 5.4
CVE-2017-0304

A SQL injection vulnerability exists in the BIG-IP AFM management UI on versions 12.0.0, 12.1.0, 12.1.1, 12.1.2 and 13.0.0 that may allow a copy of t…

Mitigation only
Fix from $1,600 2017-12-21
Big Ip Afm MEDIUM 5.9
CVE-2017-6166

In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management …

Fix: after 12.1.1
Fix from $1,600 2017-11-22
Big Ip Ltm HIGH 7.4
CVE-2017-6168EPSS 20%

On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (fixed in 13.0.0 HF3) a virtual…

Fix: after 12.1.2
Fix from $1,950 2017-11-17
Big Ip Local Traffic Manager HIGH 8.1
CVE-2017-6157

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.5…

Fix: after 11.5.4
Fix from $1,950 2017-10-27
Big Ip Local Traffic Manager HIGH 7.5
CVE-2017-0303

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 1…

Mitigation only
Fix from $1,950 2017-10-27
Big Ip Local Traffic Manager MEDIUM 5.9
CVE-2017-6159

F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 are vulnera…

Mitigation only
Fix from $1,600 2017-10-27
Big Ip Application Acceleration Manager MEDIUM 5.9
CVE-2017-6160

In F5 BIG-IP AAM and PEM software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.4.1 to 11.5.4, a remote attacker may create maliciously crafted HTTP…

Mitigation only
Fix from $1,600 2017-10-27
Big Ip Local Traffic Manager MEDIUM 5.9
CVE-2017-6162

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 1…

Fix: after 11.5.4
Fix from $1,600 2017-10-27
Big Ip Local Traffic Manager MEDIUM 5.9
CVE-2017-6163

In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, when a virtual…

Fix: after 11.5.4
Fix from $1,600 2017-10-27
Big Ip Local Traffic Manager MEDIUM 5.3
CVE-2017-6161

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.…

Fix: after 11.5.4
Fix from $1,600 2017-10-27
Big Ip Access Policy Manager CRITICAL 9.8
CVE-2017-6165

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1…

Mitigation only
Fix from $2,300 2017-10-20
Big Ip Policy Enforcement Manager HIGH 7.4
CVE-2017-6144

In F5 BIG-IP PEM 12.1.0 through 12.1.2 when downloading the Type Allocation Code (TAC) database file via HTTPS, the server's certificate is not verif…

Mitigation only
Fix from $1,950 2017-10-20
Big Ip Access Policy Manager HIGH 7.3
CVE-2017-6145

iControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 through 12.1.2 and 13.0.0 includes a ser…

Mitigation only
Fix from $1,950 2017-10-20
Big Ip Access Policy Manager MEDIUM 5.9
CVE-2017-6141

In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 through 12.1.2, certain values in a TLS abbreviated handshake when usi…

Mitigation only
Fix from $1,600 2017-10-20
Big Ip Local Traffic Manager MEDIUM 5.9
CVE-2017-6147

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may c…

Mitigation only
Fix from $1,600 2017-09-18
Nginx HIGH 7.5
CVE-2017-7529EPSS 63%

Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into le…

Fix: 13.0 / 2016.4.7+
Fix from $1,950 2017-07-13
Big Ip Local Traffic Manager MEDIUM 5.4
CVE-2016-7469

A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, …

Mitigation only
Fix from $1,600 2017-06-09
Big Ip Local Traffic Manager CRITICAL 9.8
CVE-2017-6131

In some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may contain a default administrative password which coul…

Mitigation only
Fix from $2,300 2017-05-23
Big Ip Websafe HIGH 7.5
CVE-2016-7476

The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, APM, ASM, GTM, Link Controller, PEM, PSM, and WebSafe 11.6.0 before 11.6.0 HF6, …

Mitigation only
Fix from $1,950 2017-05-11
Big Ip Local Traffic Manager HIGH 7.5
CVE-2016-9250

In F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user with access to the control plane may be able to delete…

Mitigation only
Fix from $1,950 2017-05-10
Big Ip Local Traffic Manager HIGH 8.8
CVE-2016-9251

In F5 BIG-IP 12.0.0 through 12.1.2, an authenticated attacker may be able to cause an escalation of privileges through a crafted iControl REST connec…

Mitigation only
Fix from $1,950 2017-05-09
Big Ip Local Traffic Manager HIGH 7.5
CVE-2016-9253

In F5 BIG-IP 12.1.0 through 12.1.2, specific websocket traffic patterns may cause a disruption of service for virtual servers configured to use the w…

Mitigation only
Fix from $1,950 2017-05-09
Big Ip Local Traffic Manager HIGH 7.5
CVE-2016-9256

In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the role_map is not …

Mitigation only
Fix from $1,950 2017-05-09
Big Ip Access Policy Manager MEDIUM 6.1
CVE-2016-9257

In F5 BIG-IP APM 12.0.0 through 12.1.2, non-authenticated users may be able to inject JavaScript into a request that will then be rendered and execut…

Mitigation only
Fix from $1,600 2017-05-09