Known vulnerabilities in BIG-IP 15.1.9 - page 5

Software: BIG-IP
Version: 15.1.9
Software CPE: cpe:2.3:h:f5_networks:big-ip:*:*:*:*:*:*:*:*
Total vulnerabilities: 101
Public exploits: 12
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BIG-IP version 15.1.9 BIG-IP 15.1.9 is affected by 101 vulnerabilities: 2 critical, 5 high, 61 medium, 33 low Critical High Medium Low

Vulnerabilities (101)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96042 - Exposure of sensitive information to an unauthorized actor
CVE-2024-41723
CWE-200 Low
No
No
16.1.5, 17.1.1 15.08.2024 SB2024081524
#VU96040 - NULL Pointer Dereference
CVE-2024-41164
CWE-476 Medium
No
No
15.1.10, 16.1.5, 17.1.1 15.08.2024 SB2024081522
#VU96038 - Resource exhaustion
CVE-2024-41727
CWE-400 Medium
No
No
16.1.5 15.08.2024 SB2024081521
#VU96035 - Improper input validation
CVE-2024-39778
CWE-20 Medium
No
No
16.1.5, 17.1.1 15.08.2024 SB2024081518
#VU94585 - Improper input validation
CVE-2024-21134
CWE-20 Low
No
No
- 18.07.2024 SB20240718165
SB20240731218
SB2024080314
and 8 more
#VU93544 - Improper input validation
CVE-2024-38477
CWE-20 Medium
No
No
- 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 58 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891
CWE-200 Low
No
No
- 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 194 more
#VU89331 - Missing release of memory after effective lifetime
CVE-2024-32761
CWE-401 Medium
No
No
15.1.10 10.05.2024 SB2024051015
#VU89273 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-31156
CWE-79 Low
No
No
15.1.10.4, 16.1.4.3, 17.1.1.3 09.05.2024 SB2024050901
#VU82648 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-46748
CWE-89 Medium
No
Exploited
13.1.5.1 + hotfix-bigip-13.1.5.1.0.20.2-eng3, 14.1.5.6 + hotfix-bigip-14.1.5.6.0.10.6-eng3, 15.1.10.2 + hotfix-bigip-15.1.10.2.0.44.2-eng3, 16.1.4.1 + hotfix-bigip-16.1.4.1.0.50.5-eng3, 17.1.0.3 + hotfix-bigip-17.1.0.3.0.75.4-eng3 01.11.2023 SB2023110119
#VU82544 - Authentication Bypass Using an Alternate Path or Channel
CVE-2023-46747
CWE-288 High
Public exploit available
Exploited
13.1.5.1 + hotfix-bigip-13.1.5.1.0.20.2-eng3, 14.1.5.6 + hotfix-bigip-14.1.5.6.0.10.6-eng3, 15.1.10.2 + hotfix-bigip-15.1.10.2.0.44.2-eng3, 16.1.4.1 + hotfix-bigip-16.1.4.1.0.50.5-eng3, 17.1.0.3 + hotfix-bigip-17.1.0.3.0.75.4-eng3 27.10.2023 SB2023102726
SB2024080142
#VU82368 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-41373
CWE-22 Medium
No
No
14.1.5.6, 15.1.10.2, 16.1.4.1, 17.1.0.3 25.10.2023 SB2023102537
#VU71754 - Integer overflow
CVE-2022-25147
CWE-190 High
No
No
17.5.1.1 02.02.2023 SB2023020210
SB2023020212
SB2023020942
and 49 more
#VU63099 - Uncaught Exception
CVE-2021-0190
CWE-248 Low
No
No
- 12.05.2022 SB2022051714
SB2022062303
SB2022081211
and 13 more
#VU63082 - Out-of-bounds write
CVE-2021-0153
CWE-787 Low
No
No
- 12.05.2022 SB2022051714
SB2022062304
SB2022081211
and 13 more
#VU63081 - Improper input validation
CVE-2021-0154
CWE-20 Low
No
No
- 11.05.2022 SB2022051714
SB2022062302
SB2022081211
and 13 more
#VU57498 - Improper input validation
CVE-2021-22931
CWE-20 High
No
No
17.5.1.1 19.10.2021 SB2021101945
SB2022020113
SB2022031104
and 28 more
#VU56967 - Improper input validation
CVE-2021-3672
CWE-20 Medium
No
No
17.5.1.1 30.09.2021 SB2021093017
SB2021110508
SB2022031104
and 39 more
#VU16727 - Use After Free
CVE-2018-1000878
CWE-416 Low
No
No
- 27.12.2018 SB2018122014
SB2018122801
SB2019041207
and 13 more
#VU16726 - Double Free
CVE-2018-1000877
CWE-415 Low
No
No
- 20.12.2018 SB2018122014
SB2018122801
SB2019041207
and 13 more


Showing elements 81 - 100 out of 101