Login Request a demo
BL
Product
BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator)
by F5 Networks, Inc. · last CVE Mar 13, 2019
25
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities25In the news0Timeline
Severity mix
Critical 1High 11Medium 13Low 0
Severity
All severities25Critical1High11Medium13Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-6592
9.1
1%
Feb 26
On BIG-IP 14.1.0-14.1.0.1, TMM may restart and produce a core file when validating SSL certificates in client SSL or server SSL profiles
Affected: 14.1.0-14.1.0.1
CVE-2018-5542
8.1
1%
Jul 25
F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.6, or 11.2.1-11.6.3.2 HTTPS health monitors do not validate the identity of the monitored server
Affected: 13.0.0-13.0.1; 12.1.0-12.1.3.6; 11.2.1-11.6.3.2
CVE-2018-15330
7.5
1%
Dec 20
On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, when a virtual server using the inflate functionality to process a gzip bomb as a payload, the BIG-IP system will…
Affected: 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, 12.1.0-12.1.3.7
CVE-2018-15318
7.5
1%
Oct 31
In BIG-IP 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, or 12.1.3.4-12.1.3.6, If an MPTCP connection receives an abort signal while the initial flow is not the primary flow, the initial…
Affected: 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, 12.1.3.4-12.1.3.6
CVE-2018-15319
7.5
2%
Oct 31
On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart
Affected: 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, 12.1.0-12.1.3.6
CVE-2018-15320
7.5
1%
Oct 31
On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, undisclosed traffic patterns may lead to denial of service conditions for the BIG-IP system
Affected: 14.0.0-14.0.0.2, 13.0.0-13.1.1.1
CVE-2018-15317
7.5
1%
Oct 31
In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an attacker sending specially crafted SSL records to a SSL Virtual Server will cause corruption…
Affected: 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, 11.2.1-11.5.6
CVE-2018-5533
7.5
2%
Jul 19
Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic
Affected: 13.0.0; 12.1.0-12.1.2; 11.6.0-11.6.3.1; 11.5.0-11.5.6
CVE-2018-5534
7.5
2%
Jul 19
Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic
Affected: 13.1.0-13.1.0.5; 13.0.0; 12.1.0-12.1.3.1; 11.6.0-11.6.3.1; 11.5.0-11.5.6
CVE-2018-5535
7.5
3%
Jul 19
On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed by a Virtual Server with an associated QoE profile that has…
Affected: 14.0.0; 13.0.0-13.1.0; 12.1.0-12.1.3; 11.5.1-11.6.3
CVE-2018-5531
7.4
1%
Jul 25
Through undisclosed methods, on F5 BIG-IP 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.2.1-11.5.6, adjacent network attackers can cause a denial of service for VCMP…
Affected: 13.0.0-13.1.0.7; 12.1.0-12.1.3.5; 11.6.0-11.6.3.1; 11.2.1-11.5.6
CVE-2018-5523
7.2
2%
Jun 1
On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 and Enterprise Manager 3.1.1, when authenticated administrative users run commands…
Affected: 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, 11.2.1
CVE-2019-6600
6.1
1%
Mar 13
In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when remote authentication is enabled for administrative users and all external…
Affected: 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, 11.5.1-11.5.8
CVE-2019-6589
6.1
1%
Feb 14
On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, and 11.6.0-11.6.3.2, a reflected Cross Site Scripting (XSS) vulnerability is present in an undisclosed page of the…
Affected: 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.0-11.6.3.2
CVE-2018-15315
6.1
1%
Oct 19
On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a reflected Cross Site Scripting (XSS) vulnerability in an undisclosed Configuration Utility page
Affected: 13.0.0-13.1.1.1; 12.1.0-12.1.3.6
CVE-2018-15312
6.1
1%
Oct 19
On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, a reflected Cross-Site Scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that…
Affected: 13.0.0-13.1.1.1; 12.1.0-12.1.3.6
CVE-2018-5521
6.1
1%
Jun 1
On F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, carefully crafted URLs can be used to reflect arbitrary content into GeoIP lookup responses, potentially…
Affected: 12.1.0-12.1.3.1; 11.6.1-11.6.3.1; 11.5.1-11.5.5; 11.2.1
CVE-2019-6593
5.9
1%
Feb 26
On BIG-IP 11.5.1-11.5.4, 11.6.1, and 12.1.0, a virtual server configured with a Client SSL profile may be vulnerable to a chosen ciphertext attack against CBC ciphers
Affected: 11.5.1-11.5.4, 11.6.1, 12.1.0
CVE-2019-6594
5.9
1%
Feb 26
On BIG-IP 11.5.1-11.6.3.2, 12.1.3.4-12.1.3.7, 13.0.0 HF1-13.1.1.1, and 14.0.0-14.0.0.2, Multi-Path TCP (MPTCP) does not protect against multiple zero length DATA_FINs in the…
Affected: 11.5.1-11.6.3.2, 12.1.3.4-12.1.3.7, 13.0.0 HF1-13.1.1.1, 14.0.0-14.0.0.2
CVE-2018-15311
5.9
1%
Oct 10
When F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing specially crafted TCP traffic with the Large Receive Offload (LRO) feature…
Affected: 13.0.0-13.1.0.5; 12.1.0-12.1.3.5; 11.6.0-11.6.3.2; 11.5.1-11.5.6
CVE-2018-15333
5.5
0%
Dec 28
On versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's user with any role, including Guest Role, to have access and download previously…
Affected: All versions 11.2.1+
CVE-2018-5532
5.3
1%
Jul 19
On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be resolved by the cache even after the…
Affected: 13.0.0; 12.1.0-12.1.2; 11.6.0-11.6.3.1; 11.2.1-11.5.6
CVE-2017-6153
5.3
2%
Jun 1
Features in F5 BIG-IP 13.0.0-13.1.0.3, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 system that utilizes inflate functionality directly, via an iRule, or via the…
Affected: 13.0.0-13.1.0.3; 12.1.0-12.1.3.1; 11.6.1-11.6.3.1; 11.5.1-11.5.5; 11.2.1
CVE-2018-15325
4.3
1%
Oct 31
In BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, iControl and TMSH usage by authenticated users may leak a small amount of memory when executing commands
Affected: 14.0.0-14.0.0.2, 13.0.0-13.1.1.1
CVE-2018-5525
4.3
1%
Jun 1
A local file vulnerability exists in the F5 BIG-IP Configuration utility on versions 13.0.0, 12.1.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 that exposes files containing…
Affected: 13.0.0; 12.1.0-12.1.2; 11.6.1-11.6.3.1; 11.5.1-11.5.5; 11.2.1
Showing 25