Known vulnerabilities in BIG-IP 13.1.1.2

Software: BIG-IP
Version: 13.1.1.2
Software CPE: cpe:2.3:h:f5_networks:big-ip:*:*:*:*:*:*:*:*
Total vulnerabilities: 137
Public exploits: 17
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BIG-IP version 13.1.1.2 BIG-IP 13.1.1.2 is affected by 137 vulnerabilities: 14 high, 62 medium, 61 low Critical High Medium Low

Vulnerabilities (137)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85014 - Resource exhaustion
CVE-2023-40542
CWE-400 Medium
No
No
15.1.9, 16.1.4 05.01.2024 SB2023101198
#VU82544 - Authentication Bypass Using an Alternate Path or Channel
CVE-2023-46747
CWE-288 High
Public exploit available
Exploited
13.1.5.1 + hotfix-bigip-13.1.5.1.0.20.2-eng3, 14.1.5.6 + hotfix-bigip-14.1.5.6.0.10.6-eng3, 15.1.10.2 + hotfix-bigip-15.1.10.2.0.44.2-eng3, 16.1.4.1 + hotfix-bigip-16.1.4.1.0.50.5-eng3, 17.1.0.3 + hotfix-bigip-17.1.0.3.0.75.4-eng3 27.10.2023 SB2023102726
SB2024080142
#VU76651 - Resource Management Errors
CVE-2023-2650
CWE-399 Medium
No
No
- 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU72167 - Out-of-bounds write
CVE-2023-0568
CWE-787 Medium
No
No
- 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 27 more
#VU71781 - Resource exhaustion
CVE-2023-22323
CWE-400 Medium
No
No
14.1.5.3, 15.1.8.1, 16.1.3.3, 17.0.0.2 03.02.2023 SB2023020307
#VU71754 - Integer overflow
CVE-2022-25147
CWE-190 High
No
No
17.5.1.1 02.02.2023 SB2023020210
SB2023020212
SB2023020942
and 47 more
#VU66726 - Permissions, Privileges, and Access Controls
CVE-2022-31676
CWE-264 Low
No
No
- 23.08.2022 SB2022082317
SB2022082416
SB2022082423
and 36 more
#VU64396 - Observable discrepancy
CVE-2022-23823
CWE-203 Medium
No
No
- 15.06.2022 SB2022061516
SB20250227198
SB20250227199
and 1 more
#VU64378 - Observable discrepancy
CVE-2022-24436
CWE-203 Medium
No
No
- 14.06.2022 SB2022061501
SB20250227202
SB20250227203
and 1 more
#VU64063 - Out-of-bounds write
CVE-2022-28734
CWE-787 Medium
No
No
- 08.06.2022 SB2022060810
SB2022061540
SB2022061566
and 36 more
#VU61246 - Use After Free
CVE-2021-4083
CWE-416 Low
No
No
17.5.1 10.03.2022 SB2022031029
SB2022031033
SB2022031034
and 55 more
#VU52449 - Improper input validation
CVE-2021-2163
CWE-20 Medium
No
No
- 21.04.2021 SB2021042115
SB2021042116
SB2021042117
and 99 more
#VU47777 - Missing Encryption of Sensitive Data
CVE-2020-14781
CWE-311 Low
No
No
- 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 48 more
#VU47778 - Improper input validation
CVE-2020-14782
CWE-20 Low
No
No
- 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 52 more
#VU47779 - Improper input validation
CVE-2020-14797
CWE-20 Low
No
No
- 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 46 more
#VU47780 - Improper input validation
CVE-2020-14779
CWE-20 Low
No
No
- 21.10.2020 SB2020102109
SB2020102110
SB2020102801
and 46 more
#VU27230 - Improper input validation
CVE-2020-2756
CWE-20 Low
No
No
- 23.04.2020 SB2020042301
SB2020042302
SB2020042316
and 50 more
#VU27231 - Improper input validation
CVE-2020-2757
CWE-20 Low
No
No
- 23.04.2020 SB2020042301
SB2020042302
SB2020042316
and 49 more
#VU25002 - Session Fixation
CVE-2019-17563
CWE-384 Low
No
No
- 06.02.2020 SB2019121315
SB2020011492
SB2020011519
and 16 more
#VU14322 - Permissions, Privileges, and Access Controls
CVE-2018-2952
CWE-264 Low
No
No
- 13.08.2018 SB2018080913
SB2018081307
SB2018082404
and 17 more


Showing elements 1 - 20 out of 137