f5

1,031 tracked vulnerabilities.

CVE-2020-5949 HIGH
F5 BIG-IP 13.1.0-13.1.3.4 14.0.0-14.0.1 - Denial of Service via FTP Profile Traffic Pattern
Dec 11, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-5948 CRITICAL
F5 BIG-IP 13.1.0-13.1.3.4 14.1.0-14.1.2.7 15.1.0-15.1.0.5 16.0.0-16.0.0.1 - Reflected XSS via iControl REST
Dec 11, 2020
CVSS 9.6
EPSS 0.01
CVE-2020-27713 HIGH
BIG-IP Advanced Firewall Manager 13.1.3.4 - Memory Leak in Traffic Management Microkernel
Dec 11, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-5947 MEDIUM
BIG-IP 15.1.0-15.1.1 and 16.0.0-16.0.0.1 - TCP Sequence Number Exposure
Nov 19, 2020
CVSS 4.3
EPSS 0.01
CVE-2020-5946 HIGH
BIG-IP Advanced WAF and FPS <16.0.0.1 - DoS
Nov 05, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-5945 HIGH
F5 BIG-IP 14.1.0-14.1.2.7, 15.1.0-15.1.0.5, 16.0.0-16.0.0.1 - Stored Cross-Site Scripting in TMUI Page
Nov 05, 2020
CVSS 8.4
EPSS 0.01
CVE-2020-5944 MEDIUM
BIG-IQ Centralized Management 7.1.0 - Denial of Service via DoS Summary and DNS Overview Pages
Nov 05, 2020
CVSS 4.3
EPSS 0.01
CVE-2020-5943 MEDIUM
F5 BIG-IP 14.1.0-14.1.0.1 and 14.1.2.5-14.1.2.7 - Insecure Cryptographic Storage via REST Interface
Nov 05, 2020
CVSS 6.5
EPSS 0.01
CVE-2020-5942 HIGH
BIG-IP Policy Enforcement Manager DoS via Malformed CEA Packet
Nov 05, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-5941 HIGH
BIG-IP <16.0.0.1, 15.1.0.5 - Info Disclosure
Nov 05, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-5940 MEDIUM
F5 BIG-IP 14.1.0-14.1.2.3, 15.1.0-15.1.0.5, 16.0.0-16.0.0.1 - Stored Cross-Site Scripting in TMUI
Nov 05, 2020
CVSS 5.4
EPSS 0.01
CVE-2020-5939 HIGH
F5 BIG-IP Virtual Edition DoS via SR-IOV NIC Configuration
Nov 05, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-5936 HIGH
BIG-IP LTM 12.1.0-15.1.0.5 Uncontrolled Resource Consumption via SSL Traffic
Oct 29, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-5935 MEDIUM
F5 BIG-IP 13.1.0-13.1.3.3, 14.1.0-14.1.2.3, 15.1.0-15.1.0.5 - Denial of Service via MQTT Traffic Handling
Oct 29, 2020
CVSS 5.9
EPSS 0.01
CVE-2020-5934 MEDIUM
BIG-IP APM <15.1.0.5-13.1.3.3 - DoS
Oct 29, 2020
CVSS 6.5
EPSS 0.00
CVE-2020-5933 HIGH
F5 BIG-IP 11.6.1-15.1.0.5 DoS via HTTP Compression Profile
Oct 29, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-5932 MEDIUM
BIG-IP ASM 15.1.0-15.1.0.5 - Authenticated Stored Cross-Site Scripting in Configuration Utility Response Pages
Oct 29, 2020
CVSS 4.8
EPSS 0.01
CVE-2020-5931 HIGH
F5 BIG-IP DoS via WebSocket HTTP Response Headers
Oct 29, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-5938 MEDIUM
BIG-IP <13.1.3.4, <12.1.5.2, <11.6.5.2 - Info Disclosure
Oct 29, 2020
CVSS 6.5
EPSS 0.01
CVE-2020-5937 HIGH
BIG-IP AFM 15.1.0-15.1.0.5 - Denial of Service via L4 Behavioral Traffic
Oct 29, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-5930 HIGH
BIG-IP 11.6.1-15.1.0.4 - Unauthenticated DoS
Sep 25, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-5929 MEDIUM
BIG-IP <13.0.0 HF2, <12.1.2 HF1, <11.6.2 - SSL/TLS Handshake
Sep 25, 2020
CVSS 5.9
EPSS 0.01
CVE-2020-5928 LOW
F5 BIG-IP Application Security Manager 11.5.2-11.6.5 - Cross-Site Request Forgery via Reused CSRF Token
Aug 26, 2020
CVSS 3.1
EPSS 0.00
CVE-2020-5927 MEDIUM
BIG-IP ASM 14.1.0-14.1.2.6, 15.0.0-15.0.1.3, 15.1.0-15.1.0.4 - Stored Cross-Site Scripting in Configuration Utility
Aug 26, 2020
CVSS 6.1
EPSS 0.01
CVE-2020-5926 HIGH
BIG-IP <15.1.0.4 - Memory Corruption
Aug 26, 2020
CVSS 7.5
EPSS 0.01
Products
big-ip_access_policy_manager 628 big-ip_application_security_manager 581 big-ip_advanced_firewall_manager 552 big-ip_local_traffic_manager 541 big-ip_policy_enforcement_manager 533 big-ip_link_controller 525 big-ip_application_acceleration_manager 524 big-ip_analytics 511 big-ip_global_traffic_manager 490 big-ip_domain_name_system 469 big-ip_fraud_protection_service 405 big-ip_webaccelerator 297 big-ip_edge_gateway 293 big-ip_advanced_web_application_firewall 195 big-ip_websafe 175 big-ip_ddos_hybrid_defender 166 big-ip_ssl_orchestrator 147 big-ip_carrier-grade_nat 109 big-ip_application_visibility_and_reporting 108 big-ip_container_ingress_services 86 big-ip_automation_toolchain 85 big-iq_centralized_management 85 big-ip_protocol_security_module 61 BIG-IP 46 nginx 42 njs 40 enterprise_manager 39 big-ip_wan_optimization_manager 38 traffix_signaling_delivery_controller 31 ssl_orchestrator 27
Quick Filters
Critical CVEs With Exploits In CISA KEV