Known vulnerabilities in BIG-IP 15.0.1.0.33.11-ENG Hotfix - page 2

Software: BIG-IP
Version: 15.0.1.0.33.11-ENG Hotfix
Software CPE: cpe:2.3:h:f5_networks:big-ip:*:*:*:*:*:*:*:*
Total vulnerabilities: 115
Public exploits: 10
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BIG-IP version 15.0.1.0.33.11-ENG Hotfix BIG-IP 15.0.1.0.33.11-ENG Hotfix is affected by 115 vulnerabilities: 2 critical, 5 high, 66 medium, 42 low Critical High Medium Low

Vulnerabilities (115)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105094 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24320
CWE-79 Low
No
No
15.1.10.6, 16.1.5.2, 17.1.2 27.02.2025 SB20250227197
#VU103724 - NULL Pointer Dereference
CVE-2025-20045
CWE-476 Medium
No
No
15.1.10.6.0.11.6, 16.1.5, 17.1.2 07.02.2025 SB2025020741
#VU103723 - Improper Resource Shutdown or Release
CVE-2025-22846
CWE-404 Medium
No
No
15.1.10.6.0.11.6, 16.1.5.2, 17.1.2 07.02.2025 SB2025020740
#VU103719 - Missing release of memory after effective lifetime
CVE-2025-21091
CWE-401 Medium
No
No
15.1.10.6.0.11.6, 16.1.5.2.0.7.5, 17.1.2 07.02.2025 SB2025020736
#VU103717 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-20029
CWE-78 Low
Public exploit available
No
15.1.10.6, 16.1.5.2, 17.1.2.1 07.02.2025 SB2025020734
#VU103690 - Resource exhaustion
CVE-2025-21087
CWE-400 Medium
No
No
15.1.10.6.0.11.6, 16.1.5.2.0.7.5, 17.1.2 06.02.2025 SB2025020674
#VU103689 - Resource exhaustion
CVE-2025-20058
CWE-400 Medium
No
No
15.1.10.6.0.11, 16.1.5.2.0.7.5, 17.1.2 06.02.2025 SB2025020673
#VU88175 - Reachable Assertion
CVE-2024-27983
CWE-617 Medium
Public exploit available
No
- 05.04.2024 SB2024040526
SB2024040851
SB2024040852
and 56 more
#VU88152 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-24795
CWE-113 Medium
No
No
- 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 38 more
#VU82894 - Resource Management Errors
CVE-2023-5678
CWE-399 Medium
No
No
17.1.2, 20.1.0 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more
#VU81800 - Resource Management Errors
CVE-2023-42795
CWE-399 Medium
No
No
- 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU80523 - Out-of-bounds write
CVE-2020-22218
CWE-787 Medium
No
No
- 07.09.2023 SB2023090729
SB2023090732
SB2023090843
and 21 more
#VU78798 - Resource Management Errors
CVE-2023-3817
CWE-399 Low
No
No
17.1.2, 20.1.0 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78697 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-38197
CWE-835 Medium
No
No
- 26.07.2023 SB2023072654
SB2023072656
SB2023072657
and 31 more
#VU77252 - NULL Pointer Dereference
CVE-2023-2953
CWE-476 Medium
No
No
- 13.06.2023 SB2023061366
SB2023061417
SB2023061418
and 59 more
#VU64396 - Observable discrepancy
CVE-2022-23823
CWE-203 Medium
No
No
- 15.06.2022 SB2022061516
SB20250227198
SB20250227199
and 1 more
#VU64378 - Observable discrepancy
CVE-2022-24436
CWE-203 Medium
No
No
- 14.06.2022 SB2022061501
SB20250227202
SB20250227203
and 1 more
#VU55423 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-33037
CWE-444 Medium
No
No
- 29.07.2021 SB2021072907
SB2021080807
SB2021080808
and 30 more
#VU48587 - Allocation of Resources Without Limits or Throttling
CVE-2020-8037
CWE-770 Medium
No
No
- 04.11.2020 SB2020110433
SB2020112103
SB2021042704
and 12 more
#VU7563 - Out-of-bounds read
CVE-2017-1000381
CWE-125 Medium
No
No
- 18.07.2017 SB2017071807
SB2017081717
SB2017072004
and 13 more


Showing elements 21 - 40 out of 115