F5 Networks, Inc. BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe)
23 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-6598 | 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.1-11.6.3.2, 11.5.1-11.5.8 ; EM 3.1.1 | In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise Manager 3.1.1, malformed reques | MEDIUM 4.3 | 1.0 % | ||
| CVE-2018-15322 | 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, 11.2.1-11.5.6 | On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 6.0.0-6.0.1, 5 | MEDIUM 6.5 | 1.1 % | ||
| CVE-2018-5527 | 13.1.0-13.1.0..7 | On BIG-IP 13.1.0-13.1.0.7, a remote attacker using undisclosed methods against virtual servers configured with a Client SSL or Server SSL pr | HIGH 7.5 | 2.5 % | ||
| CVE-2018-5522 | 13.0.0 ; 12.0.0-12.1.2 ; 11.6.1-11.6.3.1 ; … | On F5 BIG-IP 13.0.0, 12.0.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, when processing DIAMETER transactions with carefully crafted | MEDIUM 5.9 | 1.4 % | ||
| CVE-2018-5513 | 13.1.0-13.1.0.3 ; 13.0.0 ; 12.1.0-12.1.3.3 ; … | On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.3, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, a malformed TLS handshake causes TMM to cr | HIGH 7.5 | 1.7 % | ||
| CVE-2018-5520 | 13.0.0-13.1.0.5 ; 12.1.0-12.1.3.1 ; 11.2.1-11.6.3.1 | On an F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.2.1-11.6.3.1 system configured in Appliance mode, the TMOS Shell (tmsh) may allow an | MEDIUM 4.4 | 1.0 % | ||
| CVE-2018-5519 | 13.0.0-13.1.0.5 ; 12.1.0-12.1.3.3 ; 11.2.1-11.6.3.1 | On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.3, or 11.2.1-11.6.3.1, administrative users by way of undisclosed methods can exploit the ssldum | MEDIUM 4.9 | 1.0 % | ||
| CVE-2018-5518 | 13.0.0-13.1.0.5 ; 12.0.0-12.1.3.3 | On F5 BIG-IP 13.0.0-13.1.0.5 or 12.0.0-12.1.3.3, malicious root users with access to a VCMP guest can cause a disruption of service on adjac | MEDIUM 5.4 | 0.4 % | ||
| CVE-2018-5517 | 13.1.0-13.1.0.5 | On F5 BIG-IP 13.1.0-13.1.0.5, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of servic | HIGH 7.5 | 1.7 % | ||
| CVE-2018-5516 | 13.0.0-13.1.0.5 ; 12.1.0-12.1.2 ; 11.2.1-11.6.3.1 | On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6. | MEDIUM 4.7 | 0.3 % | ||
| CVE-2018-5515 | 13.0.0-13.1.0.5 | On F5 BIG-IP 13.0.0-13.1.0.5, using RADIUS authentication responses from a RADIUS server with IPv6 addresses may cause TMM to crash, leading | MEDIUM 4.4 | 3.1 % | ||
| CVE-2018-5512 | 13.1.0-13.1.0.5 | On F5 BIG-IP 13.1.0-13.1.0.5, when Large Receive Offload (LRO) and SYN cookies are enabled (default settings), undisclosed traffic patterns | HIGH 7.5 | 2.9 % | ||
| CVE-2018-5511 | 13.1.0-13.1.0.3 ; 13.0.0 | On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (T | HIGH 7.2 | 14 % | ||
| CVE-2018-5507 | 13.0.0 ; 12.1.0-12.1.3.1 ; 11.6.1-11.6.2 ; … | On F5 BIG-IP versions 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5, vCMP guests running on VIPRION 2100, 4200 and 4300 series bl | HIGH 7.5 | 1.1 % | ||
| CVE-2018-5506 | 13.0.0 ; 12.1.0-12.1.2 ; 11.6.1 ; … | In F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, or 11.2.1 the Apache modules apache_auth_token_mod and mod_auth_f5_auth_token.cpp | CRITICAL 9.8 | 0.7 % | ||
| CVE-2017-6158 | 12.0.0-12.1.2 ; 11.6.0-11.6.1 ; 11.5.1-11.5.5 ; … | In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling of invalid IP addres | MEDIUM 6.5 | 1.1 % | ||
| CVE-2017-6156 | 12.1.0-12.1.1 ; 11.6.0-11.6.1 ; 11.5.1-11.5.5 ; … | When the F5 BIG-IP 12.1.0-12.1.1, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 system is configured with a wildcard IPSec tunnel endpoint, it may | MEDIUM 6.4 | 0.9 % | ||
| CVE-2018-5504 | 13.0.0 - 13.1.0.3 ; 12.1.0 - 12.1.3.1 | In some circumstances, the Traffic Management Microkernel (TMM) does not properly handle certain malformed Websockets requests/responses, wh | HIGH 8.1 | 4.3 % | ||
| CVE-2018-5502 | 13.0.0 - 13.1.0.3 | On F5 BIG-IP versions 13.0.0 - 13.1.0.3, attackers may be able to disrupt services on the BIG-IP system with maliciously crafted client cert | HIGH 7.5 | 1.3 % | ||
| CVE-2018-5501 | 13.0.0 ; 12.1.0 - 12.1.3.1 ; 11.6.1 - 11.6.x ; … | In some circumstances, on F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, any 11.6.x or 11.5.x release, or 11.2.1, TCP DNS profile allo | MEDIUM 5.9 | 1.3 % | ||
| CVE-2018-5500 | 13.0.0 ; 12.1.0 - 12.1.3.1 ; 11.6.1 - 11.6.2 | On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, every Multipath TCP (MCTCP) connection established leaks a small | MEDIUM 5.9 | 1.3 % | ||
| CVE-2017-6164 | 13.0.0 ; 12.0.0 - 12.1.2 ; 11.6.0 - 11.6.1 ; … | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 1 | HIGH 8.1 | 3.9 % | ||
| CVE-2017-6151 | 13.0.0 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 1 | HIGH 7.5 | 1.6 % |