Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

F5 Networks, Inc. BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator)

25 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2019-660014.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, 11.5.1-11.5.8In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when remote authentication is enabled for adMEDIUM 6.11.2 %
CVE-2019-659411.5.1-11.6.3.2, 12.1.3.4-12.1.3.7, 13.0.0 HF1-13.1.1.1, 14.0.0-14.0.0.2On BIG-IP 11.5.1-11.6.3.2, 12.1.3.4-12.1.3.7, 13.0.0 HF1-13.1.1.1, and 14.0.0-14.0.0.2, Multi-Path TCP (MPTCP) does not protect against multMEDIUM 5.91.0 %
CVE-2019-659311.5.1-11.5.4, 11.6.1, 12.1.0On BIG-IP 11.5.1-11.5.4, 11.6.1, and 12.1.0, a virtual server configured with a Client SSL profile may be vulnerable to a chosen ciphertext MEDIUM 5.90.7 %
CVE-2019-659214.1.0-14.1.0.1On BIG-IP 14.1.0-14.1.0.1, TMM may restart and produce a core file when validating SSL certificates in client SSL or server SSL profiles.CRITICAL 9.11.0 %
CVE-2019-658914.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.0-11.6.3.2On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, and 11.6.0-11.6.3.2, a reflected Cross Site Scripting (XSS) vulnerability is prMEDIUM 6.10.8 %
CVE-2018-15333All versions 11.2.1+On versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's user with any role, including Guest Role, to have MEDIUM 5.50.4 %
CVE-2018-1533014.0.0-14.0.0.2, 13.0.0-13.1.1.1, 12.1.0-12.1.3.7On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, when a virtual server using the inflate functionality to process a gzip bombHIGH 7.51.3 %
CVE-2018-1532514.0.0-14.0.0.2, 13.0.0-13.1.1.1In BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, iControl and TMSH usage by authenticated users may leak a small amount of memory when executinMEDIUM 4.31.0 %
CVE-2018-1532014.0.0-14.0.0.2, 13.0.0-13.1.1.1On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, undisclosed traffic patterns may lead to denial of service conditions for the BIG-IP system. THIGH 7.51.3 %
CVE-2018-1531914.0.0-14.0.0.2, 13.0.0-13.1.1.1, 12.1.0-12.1.3.6On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP profile can cause thHIGH 7.51.9 %
CVE-2018-1531814.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, 12.1.3.4-12.1.3.6In BIG-IP 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, or 12.1.3.4-12.1.3.6, If an MPTCP connection receives an abort signal while the initial flow iHIGH 7.51.3 %
CVE-2018-1531714.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, 11.2.1-11.5.6In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an attacker sending specially crafted SSL records to a SSLHIGH 7.51.4 %
CVE-2018-1531513.0.0-13.1.1.1 ; 12.1.0-12.1.3.6On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a reflected Cross Site Scripting (XSS) vulnerability in an undisclosed ConfiguratMEDIUM 6.10.9 %
CVE-2018-1531213.0.0-13.1.1.1 ; 12.1.0-12.1.3.6On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, a reflected Cross-Site Scripting (XSS) vulnerability exists in an undisclosed page of the MEDIUM 6.10.9 %
CVE-2018-1531113.0.0-13.1.0.5 ; 12.1.0-12.1.3.5 ; 11.6.0-11.6.3.2 ; …When F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing specially crafted TCP traffic with the LargMEDIUM 5.91.4 %
CVE-2018-554213.0.0-13.0.1 ; 12.1.0-12.1.3.6 ; 11.2.1-11.6.3.2F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.6, or 11.2.1-11.6.3.2 HTTPS health monitors do not validate the identity of the monitored server.HIGH 8.11.2 %
CVE-2018-553113.0.0-13.1.0.7 ; 12.1.0-12.1.3.5 ; 11.6.0-11.6.3.1 ; …Through undisclosed methods, on F5 BIG-IP 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.2.1-11.5.6, adjacent network attackers caHIGH 7.40.5 %
CVE-2018-553514.0.0 ; 13.0.0-13.1.0 ; 12.1.0-12.1.3 ; …On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed by a Virtual Server HIGH 7.52.6 %
CVE-2018-553413.1.0-13.1.0.5 ; 13.0.0 ; 12.1.0-12.1.3.1 ; …Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while procesHIGH 7.51.8 %
CVE-2018-553313.0.0 ; 12.1.0-12.1.2 ; 11.6.0-11.6.3.1 ; …Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward prHIGH 7.51.8 %
CVE-2018-553213.0.0 ; 12.1.0-12.1.2 ; 11.6.0-11.6.3.1 ; …On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be reMEDIUM 5.31.2 %
CVE-2018-552513.0.0 ; 12.1.0-12.1.2 ; 11.6.1-11.6.3.1 ; …A local file vulnerability exists in the F5 BIG-IP Configuration utility on versions 13.0.0, 12.1.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, MEDIUM 4.31.0 %
CVE-2018-552313.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, 11.2.1On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 and Enterprise Manager 3.1.1, when authentiHIGH 7.22.2 %
CVE-2018-552112.1.0-12.1.3.1 ; 11.6.1-11.6.3.1 ; 11.5.1-11.5.5 ; …On F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, carefully crafted URLs can be used to reflect arbitrary content intMEDIUM 6.10.9 %
CVE-2017-615313.0.0-13.1.0.3 ; 12.1.0-12.1.3.1 ; 11.6.1-11.6.3.1 ; …Features in F5 BIG-IP 13.0.0-13.1.0.3, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 system that utilizes inflate functionalityMEDIUM 5.31.6 %