Known vulnerabilities in BIG-IP PEM 12.0.0

Software: BIG-IP PEM
Version: 12.0.0
Software CPE: cpe:2.3:h:f5_networks:big-ip_pem:*:*:*:*:*:*:*:*
Total vulnerabilities: 27
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BIG-IP PEM version 12.0.0 BIG-IP PEM 12.0.0 is affected by 27 vulnerabilities: 2 high, 8 medium, 17 low Critical High Medium Low

Vulnerabilities (27)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU20891 - Permissions, Privileges, and Access Controls
CVE-2019-6646
CWE-264 Medium
No
No
12.1.0 05.09.2019 SB2019080825
#VU18254 - Out-of-bounds write
CVE-2019-3863
CWE-787 Medium
No
No
- 15.04.2019 SB2019031904
SB2019041501
SB2019032002
and 20 more
#VU18025 - Integer overflow
CVE-2019-3857
CWE-190 Medium
No
No
- 19.03.2019 SB2019031904
SB2019041501
SB2019032002
and 20 more
#VU18023 - Integer overflow
CVE-2019-3856
CWE-190 Medium
No
No
- 19.03.2019 SB2019031904
SB2019041501
SB2019032002
and 20 more
#VU12844 - Data Handling
CVE-2018-5508
CWE-19 Medium
No
No
- 18.05.2018 SB2018051735
#VU12843 - Data Handling
CVE-2017-6158
CWE-19 Medium
No
No
- 18.05.2018 SB2018051735
#VU12806 - Improper Resource Shutdown or Release
CVE-2018-5507
CWE-404 Medium
No
No
- 17.05.2018 SB2018051735
#VU12805 - Improper Resource Shutdown or Release
CVE-2017-6148
CWE-404 Medium
No
No
- 17.05.2018 SB2018051735
#VU12331 - Improper Access Control
CVE-2018-5518
CWE-284 Low
No
No
- 02.05.2018 SB2018050209
#VU11253 - Improper Resource Shutdown or Release
CVE-2018-5503
CWE-404 Low
No
No
- 23.03.2018 SB2018032310
#VU10393 - Improper input validation
CVE-2017-6169
CWE-20 Low
No
No
- 07.02.2018 SB2018020705
#VU9708 - Improper input validation
CVE-2017-6140
CWE-20 Low
No
No
- 22.12.2017 SB2017121908
#VU9522 - Double Free
CVE-2017-6166
CWE-415 Low
No
No
- 01.12.2017 SB2017110602
#VU9370 - Exposure of sensitive information to an unauthorized actor
CVE-2017-6168
CWE-200 Low
Public exploit available
No
- 17.11.2017 SB2017111703
#VU8987 - Improper input validation
CVE-2017-6162
CWE-20 Low
No
No
- 30.10.2017 SB2017103006
#VU8986 - Resource exhaustion
CVE-2017-6161
CWE-400 Low
No
No
- 30.10.2017 SB2017103006
#VU8985 - Improper Access Control
CVE-2017-6163
CWE-284 Low
No
No
- 30.10.2017 SB2017103006
#VU8984 - Improper Access Control
CVE-2017-6157
CWE-284 High
No
No
- 30.10.2017 SB2017103006
#VU8983 - Resource exhaustion
CVE-2017-0303
CWE-400 Low
No
No
- 30.10.2017 SB2017103006
#VU8982 - Improper input validation
CVE-2017-6160
CWE-20 Low
No
No
- 30.10.2017 SB2017103006


Showing elements 1 - 20 out of 27