Login Request a demo
BL
Product
BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator)
by F5 Networks, Inc. · last CVE Mar 13, 2019
25
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities25In the news0Timeline
Severity mix
Critical 1High 11Medium 13Low 0
Severity
All severities25Critical1High11Medium13Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-6600
6.1
1%
Mar 13
In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when remote authentication is enabled for administrative users and all external…
Affected: 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, 11.5.1-11.5.8
CVE-2019-6589
6.1
1%
Feb 14
On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, and 11.6.0-11.6.3.2, a reflected Cross Site Scripting (XSS) vulnerability is present in an undisclosed page of the…
Affected: 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.0-11.6.3.2
CVE-2018-15315
6.1
1%
Oct 19
On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a reflected Cross Site Scripting (XSS) vulnerability in an undisclosed Configuration Utility page
Affected: 13.0.0-13.1.1.1; 12.1.0-12.1.3.6
CVE-2018-15312
6.1
1%
Oct 19
On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, a reflected Cross-Site Scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that…
Affected: 13.0.0-13.1.1.1; 12.1.0-12.1.3.6
CVE-2018-5521
6.1
1%
Jun 1
On F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, carefully crafted URLs can be used to reflect arbitrary content into GeoIP lookup responses, potentially…
Affected: 12.1.0-12.1.3.1; 11.6.1-11.6.3.1; 11.5.1-11.5.5; 11.2.1
CVE-2019-6593
5.9
1%
Feb 26
On BIG-IP 11.5.1-11.5.4, 11.6.1, and 12.1.0, a virtual server configured with a Client SSL profile may be vulnerable to a chosen ciphertext attack against CBC ciphers
Affected: 11.5.1-11.5.4, 11.6.1, 12.1.0
CVE-2019-6594
5.9
1%
Feb 26
On BIG-IP 11.5.1-11.6.3.2, 12.1.3.4-12.1.3.7, 13.0.0 HF1-13.1.1.1, and 14.0.0-14.0.0.2, Multi-Path TCP (MPTCP) does not protect against multiple zero length DATA_FINs in the…
Affected: 11.5.1-11.6.3.2, 12.1.3.4-12.1.3.7, 13.0.0 HF1-13.1.1.1, 14.0.0-14.0.0.2
CVE-2018-15311
5.9
1%
Oct 10
When F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.5.1-11.5.6 is processing specially crafted TCP traffic with the Large Receive Offload (LRO) feature…
Affected: 13.0.0-13.1.0.5; 12.1.0-12.1.3.5; 11.6.0-11.6.3.2; 11.5.1-11.5.6
CVE-2018-15333
5.5
0%
Dec 28
On versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's user with any role, including Guest Role, to have access and download previously…
Affected: All versions 11.2.1+
CVE-2018-5532
5.3
1%
Jul 19
On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be resolved by the cache even after the…
Affected: 13.0.0; 12.1.0-12.1.2; 11.6.0-11.6.3.1; 11.2.1-11.5.6
CVE-2017-6153
5.3
2%
Jun 1
Features in F5 BIG-IP 13.0.0-13.1.0.3, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 system that utilizes inflate functionality directly, via an iRule, or via the…
Affected: 13.0.0-13.1.0.3; 12.1.0-12.1.3.1; 11.6.1-11.6.3.1; 11.5.1-11.5.5; 11.2.1
CVE-2018-15325
4.3
1%
Oct 31
In BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, iControl and TMSH usage by authenticated users may leak a small amount of memory when executing commands
Affected: 14.0.0-14.0.0.2, 13.0.0-13.1.1.1
CVE-2018-5525
4.3
1%
Jun 1
A local file vulnerability exists in the F5 BIG-IP Configuration utility on versions 13.0.0, 12.1.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 that exposes files containing…
Affected: 13.0.0; 12.1.0-12.1.2; 11.6.1-11.6.3.1; 11.5.1-11.5.5; 11.2.1
Showing 13