F5 Networks vulnerabilities

CVEs per yearBy the year they were published

1. 201712
2. 20192

Newest CVEs

• CVE-2019-6649

  F5 BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 and Enterprise Manager 3.1.1 may expose…

  F5 Networks · BIG-IP, Enterprise Manager

  Critical9.1
• CVE-2019-6650

  F5 BIG-IP ASM 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 may expose sensitive information and…

  F5 Networks · BIG-IP ASM

  Critical9.1
• CVE-2016-7467

  The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service…

  F5 Networks · F5 BIG-IP APM

  Medium5.3
• CVE-2017-6130

  F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) attack when deployed using the Dynamic…

  F5 Networks · SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0

  High7.4
• CVE-2017-0305

  F5 SSL Intercept iApp version 1.5.0 - 1.5.7 is vulnerable to an unauthenticated, remote attack that may allow modification of the BIG-IP system configuration,…

  F5 Networks · SSL Intercept iApp version

  Critical9.8
• CVE-2016-9252

  The Traffic Management Microkernel (TMM) in F5 BIG-IP before 11.5.4 HF3, 11.6.x before 11.6.1 HF2 and 12.x before 12.1.2 does not properly handle minimum path…

  F5 Networks · F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WebSafe

  High7.5
• CVE-2016-7474

  In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain…

  F5 Networks · F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM

  Medium5.5
• CVE-2016-7468

  An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic. This…

  F5 Networks · F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, PEM, PSM,

  Medium5.9
• CVE-2016-9245

  In F5 BIG-IP systems 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with…

  F5 Networks · F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe

  Medium5.9
• CVE-2016-6249

  F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive attributes such as passwords in plaintext…

  F5 Networks · F5 BIG-IP, REST Framework Logging

  Medium5.3