Known vulnerabilities in BIG-IP Link Controller 11.5.3
Vendor:
F5 Networks
Software:
BIG-IP Link Controller
Version:
11.5.3
Software CPE:
cpe:2.3:h:f5_networks:big-ip_link_controller:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
22
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
12.1.3.3
13.1.3.3
13.1.3.1
13.1.1.4
13.1.1.3
13.1.1.2
13.1.1.1
13.1.0.7
13.1.0.5
13.1.0.4
14.1.2.2
15.1.0.3
14.1.4.2
15.1.4
12.1.6
13.1.4
16.1.0
13.1.4.1
14.1.4.3
15.1.3.1
16.0.1.2
15.1.3
11.6.5.3
12.1.5.3
14.1.4
13.1.3.6
15.1.2.1
16.0.1.1
14.1.3.1
14.1.2.8
13.1.3.5
14.1.3
16.0.1
15.1.2
15.1.1
13.0.0 HF3
12.1.2 HF2
11.6.2 HF1
15.1.0.5
14.1.2.7
16.0.0
14.1.2-0.89.37
14.1.2.5
15.0.1.4
15.1.0.4
14.1.2.6
13.1.3.4
12.1.5.2
11.6.5.2
15.0.1.3
14.1.2.4
15.0.1.2
15.1.0.2
15.1.0.1
14.1.2.3
13.1.3.2
12.1.5.1
15.0.1.1
14.1.0.6
14.0.0.5
11.6.5.1
11.5.7
11.5.8
11.5.9
11.5.10
11.6.5
12.1.4
12.1.5
15.0.1
15.1.0
15.0.0
14.1.2.1.0.122.4-ENG Hotfix
14.1.2.1.0.115.4-ENG Hotfix
14.1.2.1.0.111.4-ENG Hotfix
14.1.2.1.0.105.4-ENG Hotfix
14.1.2.1.0.99.4-ENG Hotfix
14.1.2.1.0.97.4-ENG Hotfix
14.1.2.1.0.34.4-ENG Hotfix
14.1.2.1.0.16.4-ENG Hotfix
14.1.2.1.0.14.4-ENG Hotfix
14.1.2.1.0.46.4-ENG Hotfix
14.1.2.0.32.37-ENG Hotfix
14.1.2.0.18.37-ENG Hotfix
14.1.2.0.11.37-ENG Hotfix
14.1.0.6.0.70.9-ENG Hotfix
14.1.0.6.0.68.9-ENG Hotfix
14.1.0.6.0.14.9-ENG Hotfix
14.1.0.6.0.11.9-ENG Hotfix
14.1.0.5.0.40.5-ENG Hotfix
14.1.0.5.0.36.5-ENG Hotfix
14.1.0.5.0.15.5-ENG Hotfix
14.1.0.3.0.99.6-ENG Hotfix
14.1.0.3.0.97.6-ENG Hotfix
14.1.0.3.0.79.6-ENG Hotfix
15.0.1.0.48.11-ENG Hotfix
15.0.1.0.33.11-ENG Hotfix
13.1.1.5
14.0.1
14.0.0
14.1.2
14.1.1
14.1.0
13.1.1
14.0.1.1
14.1.2.1
13.1.3
11.6.4
11.4.1
11.5.0
13.1.0.8
13.0.0 HF1
12.1.3.1
11.5.6
12.1.3.2
12.1.3.4
13.1.0.6
13.0.1
11.5.5
11.6.3
12.1.3
13.1.0.3
13.1.0.2
13.1.0.1
13.1.0
11.5.3
11.5.2
11.5.1
12.0.1
11.6.2
11.4.0
11.2.1
11.5.4
11.5.1 HF6
11.6.0
12.1.2 HF1
13.0.0
12.1.0 HF1
12.0.0 HF4
12.0.0 HF3
12.0.0 HF1
12.1.2
12.0.0
11.6.1 HF1
12.1.1
12.1.0
11.6.1
Vulnerabilities (22)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU46077 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-5917 |
CWE-300 | Medium | 12.1.5.2, 14.1.2.4, 15.0.1.4, 15.1.0.5, 16.0.0 | 26.08.2020 |
SB2020082611 |
||
| #VU31791 - Permissions, Privileges, and Access Controls CVE-2020-5907 |
CWE-264 | Low | 11.6.5.2, 12.1.5.2, 13.1.3.4, 14.1.2.4, 15.0.1.4, 15.1.0.4 | 23.07.2020 |
SB2020070133 |
||
| #VU26465 - Improper input validation CVE-2020-5857 |
CWE-20 | Medium | 12.1.5.1, 13.1.3.2, 14.1.2.3, 15.0.1.1, 15.1.0 | 30.03.2020 |
SB2020033010 |
||
| #VU26463 - Command injection CVE-2020-5858 |
CWE-77 | Low | 12.1.5.1, 14.1.2.3, 15.1.0 | 30.03.2020 |
SB2020033010 |
||
| #VU26459 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-5860 |
CWE-300 | Medium | - | 30.03.2020 |
SB2020033008 |
||
| #VU25007 - Improper input validation CVE-2020-5854 |
CWE-20 | Medium | 12.1.5.1, 13.1.3.2, 14.0.1.1, 14.1.2.1, 15.1.0 | 06.02.2020 |
SB2020020608 |
||
| #VU23102 - Resource exhaustion CVE-2019-6667 |
CWE-400 | Medium | 11.6.5.1, 12.1.5, 13.1.3, 14.0.0.5, 14.1.0.6, 15.0.1.1 | 29.11.2019 |
SB2019112909 |
||
| #VU22978 - Reliance on Reverse DNS Resolution for a Security-Critical Action CVE-2019-6663 |
CWE-350 | Low | - | 26.11.2019 |
SB2019112603 |
||
| #VU20891 - Permissions, Privileges, and Access Controls CVE-2019-6646 |
CWE-264 | Medium | 12.1.0 | 05.09.2019 |
SB2019080825 |
||
| #VU20858 - Out-of-bounds write CVE-2017-18551 |
CWE-787 | Low | 11.6.5.3, 12.1.5.3, 13.1.3.6, 14.1.3.1, 15.1.3 | 04.09.2019 |
SB2019081914 SB2020121806 SB2020122317 and 9 more |
||
| #VU12849 - Improper Restriction of Excessive Authentication Attempts CVE-2018-5506 |
CWE-307 | Low | - | 18.05.2018 |
SB2018051735 |
||
| #VU12843 - Data Handling CVE-2017-6158 |
CWE-19 | Medium | - | 18.05.2018 |
SB2018051735 |
||
| #VU12806 - Improper Resource Shutdown or Release CVE-2018-5507 |
CWE-404 | Medium | - | 17.05.2018 |
SB2018051735 |
||
| #VU12805 - Improper Resource Shutdown or Release CVE-2017-6148 |
CWE-404 | Medium | - | 17.05.2018 |
SB2018051735 |
||
| #VU12774 - Improper input validation CVE-2017-6156 |
CWE-20 | Medium | - | 16.05.2018 |
SB2018051735 |
||
| #VU12333 - Exposure of sensitive information to an unauthorized actor CVE-2018-5516 |
CWE-200 | Low | - | 02.05.2018 |
SB2018050209 |
||
| #VU12332 - Exposure of sensitive information to an unauthorized actor CVE-2018-5520 |
CWE-200 | Low | - | 02.05.2018 |
SB2018050209 |
||
| #VU12330 - Improper Access Control CVE-2018-5519 |
CWE-284 | Low | - | 02.05.2018 |
SB2018050209 |
||
| #VU12319 - Improper Resource Shutdown or Release CVE-2017-6155 |
CWE-404 | Medium | - | 01.05.2018 |
SB2018050209 |
||
| #VU9737 - Improper input validation CVE-2017-6134 |
CWE-20 | Low | - | 22.12.2017 |
SB2017122002 SB2017122003 |
Showing elements 1 - 20 out of 22