Known vulnerabilities in BIG-IP GTM 13.0.0

Software: BIG-IP GTM
Version: 13.0.0
Software CPE: cpe:2.3:h:f5_networks:big-ip_gtm:*:*:*:*:*:*:*:*
Total vulnerabilities: 27
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BIG-IP GTM version 13.0.0 BIG-IP GTM 13.0.0 is affected by 27 vulnerabilities: 6 medium, 21 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU46575 - Cryptographic Issues
CVE-2020-5929
CWE-310 Medium
No
No
11.6.2 HF1, 11.6.3, 12.1.2 HF2, 12.1.3, 13.0.0 HF3, 13.1.0, 14.0.0 10.09.2020 SB2020091016
#VU23102 - Resource exhaustion
CVE-2019-6667
CWE-400 Medium
No
No
11.6.5.1, 12.1.5, 13.1.3, 14.0.0.5, 14.1.0.6, 15.0.1.1 29.11.2019 SB2019112909
#VU22978 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2019-6663
CWE-350 Low
No
No
- 26.11.2019 SB2019112603
#VU18254 - Out-of-bounds write
CVE-2019-3863
CWE-787 Medium
No
No
- 15.04.2019 SB2019031904
SB2019041501
SB2019032002
and 20 more
#VU18025 - Integer overflow
CVE-2019-3857
CWE-190 Medium
No
No
- 19.03.2019 SB2019031904
SB2019041501
SB2019032002
and 20 more
#VU18023 - Integer overflow
CVE-2019-3856
CWE-190 Medium
No
No
- 19.03.2019 SB2019031904
SB2019041501
SB2019032002
and 20 more
#VU13524 - Improper input validation
CVE-2018-5528
CWE-20 Low
No
No
13.1.0.8 29.06.2018 SB2018062913
#VU13510 - Resource exhaustion
CVE-2018-5527
CWE-400 Low
No
No
13.1.0.8 28.06.2018 SB2018062913
#VU12849 - Improper Restriction of Excessive Authentication Attempts
CVE-2018-5506
CWE-307 Low
No
No
- 18.05.2018 SB2018051735
#VU12846 - Command injection
CVE-2018-5511
CWE-77 Low
No
No
- 18.05.2018 SB2018051735
#VU12333 - Exposure of sensitive information to an unauthorized actor
CVE-2018-5516
CWE-200 Low
No
No
- 02.05.2018 SB2018050209
#VU12332 - Exposure of sensitive information to an unauthorized actor
CVE-2018-5520
CWE-200 Low
No
No
- 02.05.2018 SB2018050209
#VU12331 - Improper Access Control
CVE-2018-5518
CWE-284 Low
No
No
- 02.05.2018 SB2018050209
#VU12330 - Improper Access Control
CVE-2018-5519
CWE-284 Low
No
No
- 02.05.2018 SB2018050209
#VU12329 - Improper Authentication
CVE-2018-5515
CWE-287 Medium
No
No
- 02.05.2018 SB2018050209
#VU11392 - Missing release of memory after effective lifetime
CVE-2018-5500
CWE-401 Low
No
No
- 30.03.2018 SB2018030115
#VU11390 - Resource exhaustion
CVE-2018-5501
CWE-400 Low
No
No
- 30.03.2018 SB2018030115
#VU11254 - Improper Resource Shutdown or Release
CVE-2018-5502
CWE-404 Low
No
No
- 23.03.2018 SB2018032310
#VU9739 - Improper input validation
CVE-2017-6133
CWE-20 Low
No
No
- 25.12.2017 SB2017122002
#VU9737 - Improper input validation
CVE-2017-6134
CWE-20 Low
No
No
- 22.12.2017 SB2017122002
SB2017122003


Showing elements 1 - 20 out of 27