Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Big Ip Advanced Firewall Manager
HIGH 7.5
When BIG-IP AFM Device DoS or DoS profile is configured with NXDOMAIN attack vector and bad actor detection, undisclosed queries can cause the Traffi…
Big Ip Advanced Firewall Manager
HIGH 7.5
For unspecified traffic patterns, BIG-IP AFM IPS engine may spend an excessive amount of time matching the traffic against signatures, resulting in T…
Big Ip Next
HIGH 7.5
The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages …
Big Ip Access Policy Manager
CRITICAL 9.8
Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the manag…
Big Ip Access Policy Manager
HIGH 8.8
An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network acce…
Big Ip Access Policy Manager
HIGH 7.8
An insufficient verification of data vulnerability exists in BIG-IP Edge Client Installer on macOS that may allow an attacker elevation of privileges…
Big Ip Next Service Proxy For Kubernetes
HIGH 7.4
The BIG-IP SPK TMM (Traffic Management Module) f5-debug-sidecar and f5-debug-sshd containers contains hardcoded credentials that may allow an attacke…
Big Ip Access Policy Manager
CRITICAL 9.9
A directory traversal vulnerability exists in the BIG-IP Configuration Utility that may allow an authenticated attacker to execute commands on the BI…
Big Ip Access Policy Manager
HIGH 8.7
When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing BI…
Big Ip Access Policy Manager
HIGH 7.8
The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. This vulnerabilit…
Big Ip Access Policy Manager
HIGH 7.5
When IPSec is configured on a Virtual Server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Tec…
Big Ip Access Policy Manager
HIGH 7.2
When a non-admin user has been assigned an administrator role via an iControl REST PUT request and later the user's role is reverted back to a non-ad…
Big Ip Access Policy Manager
MEDIUM 6.5
The BIG-IP and BIG-IQ systems do not encrypt some sensitive information written to Database (DB) variables. Note: Software versions which have reac…
Big Ip Domain Name System
MEDIUM 5.5
When on BIG-IP DNS or BIG-IP LTM enabled with DNS Services License, and a TSIG key is created, it is logged in plaintext in the audit log. Note: Sof…
Big Iq Centralized Management
MEDIUM 5.5
When TACACS+ audit forwarding is configured on BIG-IP or BIG-IQ system, sharedsecret is logged in plaintext in the audit log. Note: Software version…
Big Ip Access Policy Manager
HIGH 8.1
An authenticated user's session cookie may remain valid for a limited time after logging out from the BIG-IP Configuration utility on a multi-blade V…
Big Ip Access Policy Manager
HIGH 7.5
When a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, and an iRule using the HTTP_REQUEST event or Local…
Big Ip Access Policy Manager
HIGH 7.5
When TCP Verified Accept is enabled on a TCP profile that is configured on a Virtual Server, undisclosed requests can cause an increase in memory res…
Big Ip Access Policy Manager
HIGH 8.2
BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support (EoTS) are not…
Big Ip Access Policy Manager
HIGH 7.1
BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support (EoTS) are not…
Access Policy Manager Clients
HIGH 7.8
The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. Note: Software ve…
Big Ip Access Policy Manager
MEDIUM 6.1
A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which allows an attacker to ru…
Big Ip Access Policy Manager
MEDIUM 6.1
Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards generate a deterministic password for the Crypto User account. The predictable nature…
Access Policy Manager Clients
MEDIUM 5.5
An insufficient verification of data vulnerability exists in BIG-IP Edge Client for Windows and macOS that may allow an attacker to modify its config…
Big Ip Access Policy Manager
MEDIUM 5.4
A cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScrip…
Big Ip Domain Name System
HIGH 8.8
When DNS is provisioned, an authenticated remote command execution vulnerability exists in DNS iQuery mesh. Note: Software versions which have r…
Big Ip Access Policy Manager
HIGH 7.5
When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate.…
Nginx Api Connectivity Manager
HIGH 7.1
NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify sensitive files on NGINX Instance M…
Big Iq Centralized Management
MEDIUM 5.4
An authenticated attacker granted a Viewer or Auditor role on a BIG-IQ can upload arbitrary files using an undisclosed iControl REST endpoint. Note:…
Nginx Api Connectivity Manager
HIGH 8.1
NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assigned environment. Note: So…