Known vulnerabilities in BIG-IP Advanced WAF 15.0.1
Vendor:
F5 Networks
Software:
BIG-IP Advanced WAF
Version:
15.0.1
Software CPE:
cpe:2.3:a:f5_networks:big-ip_advanced_waf:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
12
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Vulnerabilities by Severity
17.5.0
17.1.2
17.1.1
17.1.0
15.1.10.7
15.1.10.6
15.1.10.5
15.1.10.4
15.1.10.3
15.1.10.2
15.1.10.1
15.1.10.0
17.5.1
15.1.10.8
17.1.3
14.1.4.2
13.1.0.8
14.1.4.5
15.1.4.1
16.1.2
14.1.4.4
15.1.4
16.1.1
14.1.4.1
12.1.6
16.1.0
13.1.4.1
14.1.4.3
15.1.3.1
16.0.1.2
13.1.4
15.1.3
11.6.5.3
12.1.5.3
14.1.4
13.1.3.6
15.1.2.1
16.0.1.1
14.1.3.1
13.1.3.4
13.1.3.5
14.1.3
15.1.2
16.0.1
15.1.1
14.1.2.8
13.0.0
12.1.2 HF1
14.0.0
13.0.0 HF3
12.1.2 HF2
11.6.2 HF1
15.1.0.2
14.1.2-0.89.37
14.1.2.5
12.1.5.2
11.6.1
11.6.2
11.6.3
11.6.4
11.6.5
12.1.0
12.1.1
12.1.2
12.1.3
12.1.4
12.1.5
13.1.0
13.1.1
13.1.3
14.1.0
14.1.2
15.0.0
15.0.1
15.1.0
16.0.0
Vulnerabilities (12)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU56088 - Improper input validation CVE-2021-23045 |
CWE-20 | Low | 13.1.4.1, 14.1.4.3, 15.1.3.1, 16.0.1.2, 16.1.0 | 25.08.2021 |
SB2021082512 |
||
| #VU52754 - Insufficient Session Expiration |
CWE-613 | Low | 13.1.4, 14.1.4, 15.1.3, 16.0.1.1 | 29.04.2021 |
SB2021042921 |
||
| #VU50620 - Resource exhaustion CVE-2021-22976 |
CWE-400 | Medium | 13.1.3.6, 14.1.3.1, 15.1.2, 16.0.1.1 | 11.02.2021 |
SB2021021117 |
||
| #VU50608 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-22979 |
CWE-79 | Medium | 13.1.3.5, 14.1.2.8, 15.1.1, 16.0.1 | 11.02.2021 |
SB2021021105 |
||
| #VU49084 - Improper input validation CVE-2020-27728 |
CWE-20 | Medium | 14.1.3.1, 15.1.1, 16.0.1 | 17.12.2020 |
SB2020121738 |
||
| #VU49082 - Resource exhaustion CVE-2020-27718 |
CWE-400 | Medium | 13.1.3.5, 14.1.3.1, 15.1.1, 16.0.1 | 17.12.2020 |
SB2020121736 |
||
| #VU49067 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-27719 |
CWE-79 | Low | 14.1.3.1, 15.1.1, 16.0.1 | 17.12.2020 |
SB2020121723 |
||
| #VU48145 - Improper input validation CVE-2020-5946 |
CWE-20 | Medium | 14.1.2.8, 15.1.1, 16.0.1 | 04.11.2020 |
SB2020110410 |
||
| #VU46071 - Improper Certificate Validation CVE-2020-5913 |
CWE-295 | Medium | 12.1.5.2, 14.1.2-0.89.37, 14.1.2.5, 15.1.0.2, 16.0.0 | 26.08.2020 |
SB2020082607 |
||
| #VU18254 - Out-of-bounds write CVE-2019-3863 |
CWE-787 | Medium | - | 15.04.2019 |
SB2019031904 SB2019041501 SB2019032002 and 20 more |
||
| #VU18025 - Integer overflow CVE-2019-3857 |
CWE-190 | Medium | - | 19.03.2019 |
SB2019031904 SB2019041501 SB2019032002 and 20 more |
||
| #VU18023 - Integer overflow CVE-2019-3856 |
CWE-190 | Medium | - | 19.03.2019 |
SB2019031904 SB2019041501 SB2019032002 and 20 more |