Known vulnerabilities in BIG-IP LTM 11.5.2
Vendor:
F5 Networks
Software:
BIG-IP LTM
Version:
11.5.2
Software CPE:
cpe:2.3:h:f5_networks:big-ip_ltm:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
23
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
11.6.3.1
12.1.3.6
12.1.3.5
12.1.3.3
13.1.3.3
13.1.3.1
13.1.1.4
13.1.1.3
13.1.1.1
13.1.0.7
13.1.0.5
14.1.2.2
15.1.0.3
20.3.0
20.2.1
20.2.0
20.1.0
20.0.2
20.0.1
14.1.4.2
15.1.4
14.1.4.4
12.1.6
13.1.4
16.1.0
13.1.4.1
14.1.4.3
15.1.3.1
16.0.1.2
15.1.3
11.6.5.3
12.1.5.3
14.1.4
13.1.3.6
15.1.2.1
16.0.1.1
14.1.3.1
14.1.2.8
13.1.3.5
14.1.3
16.0.1
15.1.2
15.1.1
13.0.0 HF3
12.1.2 HF2
11.6.2 HF1
15.1.0.5
14.1.2.7
16.0.0
14.1.2.5
14.1.2-0.89.37
15.0.1.4
15.1.0.4
14.1.2.6
13.1.3.4
12.1.5.2
11.6.5.2
15.0.1.3
14.1.2.4
15.0.1.2
15.1.0.2
15.1.0.1
14.1.2.3
12.1.5.1
13.1.3.2
11.5.7
11.5.8
11.5.9
11.5.10
15.1.0
12.1.4
11.6.5
15.0.1.1
14.1.0.6
14.0.0.5
12.1.5
11.6.5.1
14.1.2.1.0.122.4-ENG Hotfix
14.1.2.1.0.115.4-ENG Hotfix
14.1.2.1.0.111.4-ENG Hotfix
14.1.2.1.0.105.4-ENG Hotfix
14.1.2.1.0.99.4-ENG Hotfix
14.1.2.1.0.97.4-ENG Hotfix
14.1.2.1.0.34.4-ENG Hotfix
14.1.2.1.0.16.4-ENG Hotfix
14.1.2.1.0.14.4-ENG Hotfix
14.1.2.1.0.46.4-ENG Hotfix
14.1.2.0.32.37-ENG Hotfix
14.1.2.0.18.37-ENG Hotfix
14.1.2.0.11.37-ENG Hotfix
14.1.0.6.0.70.9-ENG Hotfix
14.1.0.6.0.68.9-ENG Hotfix
14.1.0.6.0.14.9-ENG Hotfix
14.1.0.6.0.11.9-ENG Hotfix
14.1.0.5.0.40.5-ENG Hotfix
14.1.0.5.0.36.5-ENG Hotfix
14.1.0.5.0.15.5-ENG Hotfix
14.1.0.3.0.99.6-ENG Hotfix
14.1.0.3.0.97.6-ENG Hotfix
14.1.0.3.0.79.6-ENG Hotfix
15.0.1.0.48.11-ENG Hotfix
15.0.1.0.33.11-ENG Hotfix
13.1.1.5
14.1.2
14.1.1
14.0.1
14.1.2.1
14.0.1.1
13.1.3
11.6.4
15.0.1
15.0.0
11.6.3.3
12.1.3.7
13.1.1.2
13.1.1
14.0.0.3
14.1.0
14.0.0
13.1.0.4
11.6.3.2
13.1.0.8
13.0.0 HF1
12.1.3.2
12.1.3.4
13.1.0.6
12.1.3.1
13.0.1
11.5.6
11.5.5
11.5.4 HF4
11.6.3
12.1.3
13.1.0.3
13.1.0.2
13.1.0.1
13.1.0
11.5.3
11.5.2
11.5.1
11.5.0
11.6.2
11.5.1 HF6
11.6.0
12.0.1
12.1.2 HF1
11.4.0
11.5.4
13.0.0
12.1.0 HF1
12.0.0 HF4
12.0.0 HF3
12.0.0 HF1
10.2.4
10.2.3
10.2.2
10.2.1
11.2.1
11.6.1 HF1
12.1.2
12.0.0
12.1.1
12.1.0
11.6.1
Vulnerabilities (23)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU46077 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-5917 |
CWE-300 | Medium | 12.1.5.2, 14.1.2.4, 15.0.1.4, 15.1.0.5, 16.0.0 | 26.08.2020 |
SB2020082611 |
||
| #VU31791 - Permissions, Privileges, and Access Controls CVE-2020-5907 |
CWE-264 | Low | 11.6.5.2, 12.1.5.2, 13.1.3.4, 14.1.2.4, 15.0.1.4, 15.1.0.4 | 23.07.2020 |
SB2020070133 |
||
| #VU26465 - Improper input validation CVE-2020-5857 |
CWE-20 | Medium | 12.1.5.1, 13.1.3.2, 14.1.2.3, 15.0.1.1, 15.1.0 | 30.03.2020 |
SB2020033010 |
||
| #VU26463 - Command injection CVE-2020-5858 |
CWE-77 | Low | 12.1.5.1, 14.1.2.3, 15.1.0 | 30.03.2020 |
SB2020033010 |
||
| #VU26459 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-5860 |
CWE-300 | Medium | - | 30.03.2020 |
SB2020033008 |
||
| #VU25007 - Improper input validation CVE-2020-5854 |
CWE-20 | Medium | 12.1.5.1, 13.1.3.2, 14.0.1.1, 14.1.2.1, 15.1.0 | 06.02.2020 |
SB2020020608 |
||
| #VU23102 - Resource exhaustion CVE-2019-6667 |
CWE-400 | Medium | 11.6.5.1, 12.1.5, 13.1.3, 14.0.0.5, 14.1.0.6, 15.0.1.1 | 29.11.2019 |
SB2019112909 |
||
| #VU20891 - Permissions, Privileges, and Access Controls CVE-2019-6646 |
CWE-264 | Medium | 12.1.0 | 05.09.2019 |
SB2019080825 |
||
| #VU20858 - Out-of-bounds write CVE-2017-18551 |
CWE-787 | Low | 11.6.5.3, 12.1.5.3, 13.1.3.6, 14.1.3.1, 15.1.3 | 04.09.2019 |
SB2019081914 SB2020121806 SB2020122317 and 9 more |
||
| #VU16778 - Improper input validation CVE-2018-17539 |
CWE-20 | Low | 11.6.3.3, 12.1.3.7, 13.1.1.2, 14.0.0.3, 14.1.0 | 02.01.2019 |
SB2018122707 |
||
| #VU12849 - Improper Restriction of Excessive Authentication Attempts CVE-2018-5506 |
CWE-307 | Low | - | 18.05.2018 |
SB2018051735 |
||
| #VU12843 - Data Handling CVE-2017-6158 |
CWE-19 | Medium | - | 18.05.2018 |
SB2018051735 |
||
| #VU12806 - Improper Resource Shutdown or Release CVE-2018-5507 |
CWE-404 | Medium | - | 17.05.2018 |
SB2018051735 |
||
| #VU12805 - Improper Resource Shutdown or Release CVE-2017-6148 |
CWE-404 | Medium | - | 17.05.2018 |
SB2018051735 |
||
| #VU12774 - Improper input validation CVE-2017-6156 |
CWE-20 | Medium | - | 16.05.2018 |
SB2018051735 |
||
| #VU12333 - Exposure of sensitive information to an unauthorized actor CVE-2018-5516 |
CWE-200 | Low | - | 02.05.2018 |
SB2018050209 |
||
| #VU12332 - Exposure of sensitive information to an unauthorized actor CVE-2018-5520 |
CWE-200 | Low | - | 02.05.2018 |
SB2018050209 |
||
| #VU12330 - Improper Access Control CVE-2018-5519 |
CWE-284 | Low | - | 02.05.2018 |
SB2018050209 |
||
| #VU12319 - Improper Resource Shutdown or Release CVE-2017-6155 |
CWE-404 | Medium | - | 01.05.2018 |
SB2018050209 |
||
| #VU9741 - Improper input validation CVE-2017-6132 |
CWE-20 | Low | - | 25.12.2017 |
SB2017122002 |
Showing elements 1 - 20 out of 23