Browse CVEs

HIGH 7.5 CVE-2017-6140 On the BIG-IP 2000s, 2200s, 4000s, 4200v, i5600, i5800, i7600, i7800, i10600,i10800, and VIPRION 4450 blades, running version 11.5.0, 11.5.1, 11.5.2,… Big Ip Local Traffic Manager Mitigation only Fix from $1,9502017-12-21 HIGH 7.5 CVE-2017-6151 In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, un… Big Ip Local Traffic Manager Mitigation only Fix from $1,9502017-12-21 HIGH 7.5 CVE-2017-6167 In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, race conditions i… Big Ip Local Traffic Manager after 12.1.2 Fix from $1,9502017-12-21 MEDIUM 6.5 CVE-2017-6134 In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, 12.1.0 - 12.1.2 and 11.5.1 - 11.… Big Ip Local Traffic Manager after 12.1.2 Fix from $1,6002017-12-21 MEDIUM 5.9 CVE-2017-6136 In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.0.0 - 12.1.2, undisclosed … Big Ip Local Traffic Manager after 12.1.2 Fix from $1,6002017-12-21 MEDIUM 5.9 CVE-2017-6139 In F5 BIG-IP APM software version 13.0.0 and 12.1.2, under rare conditions, the BIG-IP APM system appends log details when responding to client reque… Big Ip Access Policy Manager Mitigation only Fix from $1,6002017-12-21 MEDIUM 5.4 CVE-2017-0304 A SQL injection vulnerability exists in the BIG-IP AFM management UI on versions 12.0.0, 12.1.0, 12.1.1, 12.1.2 and 13.0.0 that may allow a copy of t… Big Ip Advanced Firewall Manager Mitigation only Fix from $1,6002017-12-21 MEDIUM 5.9 CVE-2017-6166 In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management … Big Ip Afm after 12.1.1 Fix from $1,6002017-11-22 HIGH 7.4 CVE-2017-6168EPSS 20% On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (fixed in 13.0.0 HF3) a virtual… Big Ip Ltm after 12.1.2 Fix from $1,9502017-11-17 HIGH 8.1 CVE-2017-6157 In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.5… Big Ip Local Traffic Manager after 11.5.4 Fix from $1,9502017-10-27 HIGH 7.5 CVE-2017-0303 In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 1… Big Ip Local Traffic Manager Mitigation only Fix from $1,9502017-10-27 MEDIUM 5.9 CVE-2017-6159 F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 are vulnera… Big Ip Local Traffic Manager Mitigation only Fix from $1,6002017-10-27 MEDIUM 5.9 CVE-2017-6160 In F5 BIG-IP AAM and PEM software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.4.1 to 11.5.4, a remote attacker may create maliciously crafted HTTP… Big Ip Application Acceleration Manager Mitigation only Fix from $1,6002017-10-27 MEDIUM 5.9 CVE-2017-6162 In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 1… Big Ip Local Traffic Manager after 11.5.4 Fix from $1,6002017-10-27 MEDIUM 5.9 CVE-2017-6163 In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, when a virtual… Big Ip Local Traffic Manager after 11.5.4 Fix from $1,6002017-10-27 MEDIUM 5.3 CVE-2017-6161 In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.… Big Ip Local Traffic Manager after 11.5.4 Fix from $1,6002017-10-27 CRITICAL 9.8 CVE-2017-6165 In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1… Big Ip Access Policy Manager Mitigation only Fix from $2,3002017-10-20 HIGH 7.4 CVE-2017-6144 In F5 BIG-IP PEM 12.1.0 through 12.1.2 when downloading the Type Allocation Code (TAC) database file via HTTPS, the server's certificate is not verif… Big Ip Policy Enforcement Manager Mitigation only Fix from $1,9502017-10-20 HIGH 7.3 CVE-2017-6145 iControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 through 12.1.2 and 13.0.0 includes a ser… Big Ip Access Policy Manager Mitigation only Fix from $1,9502017-10-20 MEDIUM 5.9 CVE-2017-6141 In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 through 12.1.2, certain values in a TLS abbreviated handshake when usi… Big Ip Access Policy Manager Mitigation only Fix from $1,6002017-10-20 MEDIUM 5.9 CVE-2017-6147 In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may c… Big Ip Local Traffic Manager Mitigation only Fix from $1,6002017-09-18 HIGH 7.5 CVE-2017-7529EPSS 63% Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into le… Nginx 13.0 / 2016.4.7+ Fix from $1,9502017-07-13 MEDIUM 5.4 CVE-2016-7469 A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, … Big Ip Local Traffic Manager Mitigation only Fix from $1,6002017-06-09 CRITICAL 9.8 CVE-2017-6131 In some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may contain a default administrative password which coul… Big Ip Local Traffic Manager Mitigation only Fix from $2,3002017-05-23 HIGH 7.5 CVE-2016-7476 The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, APM, ASM, GTM, Link Controller, PEM, PSM, and WebSafe 11.6.0 before 11.6.0 HF6, … Big Ip Websafe Mitigation only Fix from $1,9502017-05-11 HIGH 7.5 CVE-2016-9250 In F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user with access to the control plane may be able to delete… Big Ip Local Traffic Manager Mitigation only Fix from $1,9502017-05-10 HIGH 8.8 CVE-2016-9251 In F5 BIG-IP 12.0.0 through 12.1.2, an authenticated attacker may be able to cause an escalation of privileges through a crafted iControl REST connec… Big Ip Local Traffic Manager Mitigation only Fix from $1,9502017-05-09 HIGH 7.5 CVE-2016-9253 In F5 BIG-IP 12.1.0 through 12.1.2, specific websocket traffic patterns may cause a disruption of service for virtual servers configured to use the w… Big Ip Local Traffic Manager Mitigation only Fix from $1,9502017-05-09 HIGH 7.5 CVE-2016-9256 In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the role_map is not … Big Ip Local Traffic Manager Mitigation only Fix from $1,9502017-05-09 MEDIUM 6.1 CVE-2016-9257 In F5 BIG-IP APM 12.0.0 through 12.1.2, non-authenticated users may be able to inject JavaScript into a request that will then be rendered and execut… Big Ip Access Policy Manager Mitigation only Fix from $1,6002017-05-09