Known vulnerabilities in BIG-IP GTM 11.5.4
Vendor:
F5 Networks
Software:
BIG-IP GTM
Version:
11.5.4
Software CPE:
cpe:2.3:h:f5_networks:big-ip_gtm:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
24
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
12.1.3.3
13.1.3.3
13.1.3.1
13.1.1.4
13.1.1.3
13.1.1.2
13.1.1.1
13.1.0.7
13.1.0.5
13.1.0.4
14.1.2.2
15.1.0.3
14.1.4.2
14.1.4.4
15.1.4
12.1.6
13.1.4
16.1.0
13.1.4.1
14.1.4.3
15.1.3.1
16.0.1.2
15.1.3
11.6.5.3
12.1.5.3
14.1.4
13.1.3.6
15.1.2.1
16.0.1.1
14.1.3.1
14.1.2.8
13.1.3.5
14.1.3
16.0.1
15.1.2
15.1.1
12.1.2 HF1
13.0.0 HF3
12.1.2 HF2
11.6.2 HF1
15.1.0.5
14.1.2.7
16.0.0
14.1.2-0.89.37
14.1.2.5
15.0.1.4
15.1.0.4
14.1.2.6
13.1.3.4
12.1.5.2
11.6.5.2
15.0.1.3
14.1.2.4
15.0.1.2
15.1.0.2
15.1.0.1
14.1.2.3
13.1.3.2
12.1.5.1
15.0.1.1
14.1.0.6
14.0.0.5
11.6.5.1
11.5.7
11.5.8
11.5.9
11.5.10
11.6.5
12.1.4
12.1.5
15.0.1
15.1.0
15.0.0
14.1.2.1.0.122.4-ENG Hotfix
14.1.2.1.0.115.4-ENG Hotfix
14.1.2.1.0.111.4-ENG Hotfix
14.1.2.1.0.105.4-ENG Hotfix
14.1.2.1.0.99.4-ENG Hotfix
14.1.2.1.0.97.4-ENG Hotfix
14.1.2.1.0.34.4-ENG Hotfix
14.1.2.1.0.16.4-ENG Hotfix
14.1.2.1.0.14.4-ENG Hotfix
14.1.2.1.0.46.4-ENG Hotfix
14.1.2.0.32.37-ENG Hotfix
14.1.2.0.18.37-ENG Hotfix
14.1.2.0.11.37-ENG Hotfix
14.1.0.6.0.70.9-ENG Hotfix
14.1.0.6.0.68.9-ENG Hotfix
14.1.0.6.0.14.9-ENG Hotfix
14.1.0.6.0.11.9-ENG Hotfix
14.1.0.5.0.40.5-ENG Hotfix
14.1.0.5.0.36.5-ENG Hotfix
14.1.0.5.0.15.5-ENG Hotfix
14.1.0.3.0.99.6-ENG Hotfix
14.1.0.3.0.97.6-ENG Hotfix
14.1.0.3.0.79.6-ENG Hotfix
15.0.1.0.48.11-ENG Hotfix
15.0.1.0.33.11-ENG Hotfix
13.1.1.5
14.0.1
14.0.0
14.1.2
14.1.1
14.1.0
13.1.1
14.0.1.1
14.1.2.1
13.1.3
11.6.4
13.1.0.8
13.0.0 HF1
12.1.3.2
12.1.3.4
13.1.0.6
12.1.3.1
13.0.1
11.5.6
11.5.5
11.5.4 HF4
11.6.3
12.1.3
13.1.0.3
13.1.0.2
13.1.0.1
13.1.0
12.1.2
11.5.3
11.5.2
11.5.1
11.5.0
12.1.1
12.1.0
12.0.1
12.0.0
13.0.0
11.6.2
11.4.0
11.2.1
11.5.4
11.5.1 HF6
11.6.0
11.6.1 HF1
11.6.1
Vulnerabilities (24)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU46077 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-5917 |
CWE-300 | Medium | 12.1.5.2, 14.1.2.4, 15.0.1.4, 15.1.0.5, 16.0.0 | 26.08.2020 |
SB2020082611 |
||
| #VU31791 - Permissions, Privileges, and Access Controls CVE-2020-5907 |
CWE-264 | Low | 11.6.5.2, 12.1.5.2, 13.1.3.4, 14.1.2.4, 15.0.1.4, 15.1.0.4 | 23.07.2020 |
SB2020070133 |
||
| #VU26465 - Improper input validation CVE-2020-5857 |
CWE-20 | Medium | 12.1.5.1, 13.1.3.2, 14.1.2.3, 15.0.1.1, 15.1.0 | 30.03.2020 |
SB2020033010 |
||
| #VU26463 - Command injection CVE-2020-5858 |
CWE-77 | Low | 12.1.5.1, 14.1.2.3, 15.1.0 | 30.03.2020 |
SB2020033010 |
||
| #VU26459 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-5860 |
CWE-300 | Medium | - | 30.03.2020 |
SB2020033008 |
||
| #VU25007 - Improper input validation CVE-2020-5854 |
CWE-20 | Medium | 12.1.5.1, 13.1.3.2, 14.0.1.1, 14.1.2.1, 15.1.0 | 06.02.2020 |
SB2020020608 |
||
| #VU23102 - Resource exhaustion CVE-2019-6667 |
CWE-400 | Medium | 11.6.5.1, 12.1.5, 13.1.3, 14.0.0.5, 14.1.0.6, 15.0.1.1 | 29.11.2019 |
SB2019112909 |
||
| #VU22978 - Reliance on Reverse DNS Resolution for a Security-Critical Action CVE-2019-6663 |
CWE-350 | Low | - | 26.11.2019 |
SB2019112603 |
||
| #VU20891 - Permissions, Privileges, and Access Controls CVE-2019-6646 |
CWE-264 | Medium | 12.1.0 | 05.09.2019 |
SB2019080825 |
||
| #VU20858 - Out-of-bounds write CVE-2017-18551 |
CWE-787 | Low | 11.6.5.3, 12.1.5.3, 13.1.3.6, 14.1.3.1, 15.1.3 | 04.09.2019 |
SB2019081914 SB2020121806 SB2020122317 and 9 more |
||
| #VU12849 - Improper Restriction of Excessive Authentication Attempts CVE-2018-5506 |
CWE-307 | Low | - | 18.05.2018 |
SB2018051735 |
||
| #VU12843 - Data Handling CVE-2017-6158 |
CWE-19 | Medium | - | 18.05.2018 |
SB2018051735 |
||
| #VU12774 - Improper input validation CVE-2017-6156 |
CWE-20 | Medium | - | 16.05.2018 |
SB2018051735 |
||
| #VU12333 - Exposure of sensitive information to an unauthorized actor CVE-2018-5516 |
CWE-200 | Low | - | 02.05.2018 |
SB2018050209 |
||
| #VU12332 - Exposure of sensitive information to an unauthorized actor CVE-2018-5520 |
CWE-200 | Low | - | 02.05.2018 |
SB2018050209 |
||
| #VU12330 - Improper Access Control CVE-2018-5519 |
CWE-284 | Low | - | 02.05.2018 |
SB2018050209 |
||
| #VU9747 - Improper input validation CVE-2017-6164 |
CWE-20 | Low | - | 25.12.2017 |
SB2017122002 |
||
| #VU9741 - Improper input validation CVE-2017-6132 |
CWE-20 | Low | - | 25.12.2017 |
SB2017122002 |
||
| #VU9708 - Improper input validation CVE-2017-6140 |
CWE-20 | Low | - | 22.12.2017 |
SB2017121908 |
||
| #VU9737 - Improper input validation CVE-2017-6134 |
CWE-20 | Low | - | 22.12.2017 |
SB2017122002 SB2017122003 |
Showing elements 1 - 20 out of 24