Browse CVEs

MEDIUM 6.5 CVE-2020-27724 In BIG-IP APM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, on sy… Big Ip Access Policy Manager 13.1.3.5 / 14.1.3.1+ Fix from $1,6002020-12-24 CRITICAL 9.8 CVE-2020-27730 In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities. Nginx Controller 3.10.0+ Fix from $2,3002020-12-11 CRITICAL 9.6 CVE-2020-5948 On BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, undisclosed endpoints in… Big Ip Access Policy Manager 13.1.3.5 / 14.1.2.8+ Fix from $2,3002020-12-11 HIGH 7.5 CVE-2020-5949 On BIG-IP versions 14.0.0-14.0.1 and 13.1.0-13.1.3.4, certain traffic pattern sent to a virtual server configured with an FTP profile can cause the F… Big Ip Access Policy Manager 13.1.3.5 / 14.1.0+ Fix from $1,9502020-12-11 MEDIUM 5.3 CVE-2020-5950 On BIG-IP 14.1.0-14.1.2.6, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of the … Big Ip Advanced Firewall Manager 14.1.2.7+ Fix from $1,6002020-12-11 HIGH 7.5 CVE-2020-27713 In certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied to a virtual server and the BIG-IP system receives … Big Ip Advanced Firewall Manager Mitigation only Fix from $1,9502020-12-11 HIGH 8.4 CVE-2020-5945 In BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, undisclosed TMUI page contains a stored cross site scripting vulnerability … Big Ip Access Policy Manager 14.1.2.8 / 15.1.1+ Fix from $1,9502020-11-05 HIGH 7.5 CVE-2020-5939 In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.3, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, and 13.1.0-13.1.3.4, BIG-IP Virtual Edition (VE) systems on VMware, w… Big Ip Access Policy Manager 14.1.2.7 / 15.1.0.4+ Fix from $1,9502020-11-05 HIGH 7.5 CVE-2020-5941 On BIG-IP versions 16.0.0-16.0.0.1 and 15.1.0-15.1.0.5, using the RESOLV::lookup command within an iRule may cause the Traffic Management Microkernel… Big Ip Access Policy Manager 15.1.1 / 16.0.1+ Fix from $1,9502020-11-05 HIGH 7.5 CVE-2020-5942 In BIG-IP PEM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when processing Capa… Big Ip Policy Enforcement Manager 14.1.2.8 / 15.1.1+ Fix from $1,9502020-11-05 HIGH 7.5 CVE-2020-5946 In BIG-IP Advanced WAF and FPS versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, under some circumstances, certain format client-side a… Big Ip Advanced Web Application Firewall 14.1.2.8 / 15.1.1+ Fix from $1,9502020-11-05 MEDIUM 6.5 CVE-2020-5943 In versions 14.1.0-14.1.0.1 and 14.1.2.5-14.1.2.7, when a BIG-IP object is created or listed through the REST interface, the protected fields are obf… Big Ip Access Policy Manager after 14.1.2.7 Fix from $1,6002020-11-05 MEDIUM 5.4 CVE-2020-5940 In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.3, a stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of… Big Ip Access Policy Manager 14.1.2.4 / 15.1.1+ Fix from $1,6002020-11-05 HIGH 7.5 CVE-2020-5931 On BIG-IP 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, Virtual servers with a OneConnect profile may inco… Big Ip Access Policy Manager 14.1.2.5 / 15.1.1+ Fix from $1,9502020-10-29 HIGH 7.5 CVE-2020-5933 On versions 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, when a BIG-IP system that has a virtual server c… Big Ip Access Policy Manager 11.6.5.2 / 12.1.5.2+ Fix from $1,9502020-10-29 HIGH 7.5 CVE-2020-5936 On BIG-IP LTM 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.1, the Traffic Management Microkernel (TMM) process may consume ex… Big Ip Local Traffic Manager 12.1.5.2 / 14.1.2.8+ Fix from $1,9502020-10-29 MEDIUM 6.5 CVE-2020-5934 On BIG-IP APM 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when multiple HTTP requests from the same client to configured SAML Single Logou… Big Ip Access Policy Manager 13.1.3.4 / 14.1.2.4+ Fix from $1,6002020-10-29 MEDIUM 5.9 CVE-2020-5935 On BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, FPS, GTM, Link Controller, PEM) versions 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, w… Big Ip Access Policy Manager 13.1.3.4 / 14.1.2.4+ Fix from $1,6002020-10-29 HIGH 7.5 CVE-2020-5937 On BIG-IP AFM 15.1.0-15.1.0.5, the Traffic Management Microkernel (TMM) may produce a core file while processing layer 4 (L4) behavioral denial-of-se… Big Ip Advanced Firewall Manager 15.1.1+ Fix from $1,9502020-10-29 MEDIUM 6.5 CVE-2020-5938 On BIG-IP 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when negotiating IPSec tunnels with configured, authenticated peers, the peer may ne… Big Ip Access Policy Manager after 13.1.3.4 Fix from $1,6002020-10-29 HIGH 7.5 CVE-2020-5930 In BIG-IP 15.0.0-15.1.0.4, 14.1.0-14.1.2.7, 13.1.0-13.1.3.3, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2 and BIG-IQ 5.2.0-7.1.0, unauthenticated attackers c… Big Ip Access Policy Manager 13.1.3.4 / 14.1.2.8+ Fix from $1,9502020-09-25 MEDIUM 5.9 CVE-2020-5929 In versions 13.0.0-13.0.0 HF2, 12.1.0-12.1.2 HF1, and 11.6.1-11.6.2, BIG-IP platforms with Cavium Nitrox SSL hardware acceleration cards, a Virtual S… Big Ip Access Policy Manager 11.6.2 / 12.1.2+ Fix from $1,6002020-09-25 HIGH 7.5 CVE-2020-5921 in BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, Syn flood causes large n… Big Ip Access Policy Manager 12.1.5.2 / 14.1.2.7+ Fix from $1,9502020-08-26 HIGH 7.5 CVE-2020-5925 In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, undisclosed internally g… Big Ip Access Policy Manager 11.6.5.2 / 12.1.5.2+ Fix from $1,9502020-08-26 HIGH 7.5 CVE-2020-5926 In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, a BIG-IP virtual server with a Session Initiation Protocol (SIP) ALG profil… Big Ip Access Policy Manager 14.1.2.7 / 15.0.1.4+ Fix from $1,9502020-08-26 MEDIUM 6.1 CVE-2020-5927 In versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, BIG-IP ASM Configuration utility Stored-Cross Site Scripting. Big Ip Application Security Manager 14.1.2.7 / 15.0.1.4+ Fix from $1,6002020-08-26 HIGH 8.8 CVE-2020-5922 In BIG-IP versions 15.0.0-15.1.0.4, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, iControl REST does not implement Cross Si… Big Ip Access Policy Manager 12.1.5.2 / 13.1.3.4+ Fix from $1,9502020-08-26 HIGH 7.5 CVE-2020-5914 In BIG-IP ASM versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, undisclosed server c… Big Ip Application Security Manager 11.6.5.2 / 12.1.5.2+ Fix from $1,9502020-08-26 HIGH 7.5 CVE-2020-5918 In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management M… Big Ip Access Policy Manager 11.6.5.2 / 12.1.5.2+ Fix from $1,9502020-08-26 HIGH 7.5 CVE-2020-5919 In versions 15.1.0-15.1.0.4, rendering of certain session variables by BIG-IP APM UI-based agents in an access profile configured with Modern customi… Big Ip Access Policy Manager 15.1.0.5+ Fix from $1,9502020-08-26