Known vulnerabilities in BIG-IP 16.1.3.1 - page 5

Software: BIG-IP
Version: 16.1.3.1
Software CPE: cpe:2.3:h:f5_networks:big-ip:*:*:*:*:*:*:*:*
Total vulnerabilities: 150
Public exploits: 12
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BIG-IP version 16.1.3.1 BIG-IP 16.1.3.1 is affected by 150 vulnerabilities: 2 critical, 7 high, 93 medium, 48 low Critical High Medium Low

Vulnerabilities (150)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98758 - Missing Authentication for Critical Function
CVE-2024-45844
CWE-306 Low
Public exploit available
No
15.1.10.5, 16.1.5, 17.1.1.4 16.10.2024 SB20241016109
#VU98050 - Resource exhaustion
CVE-2024-41996
CWE-400 Medium
No
No
- 06.10.2024 SB2024100601
SB2024100602
SB2024100603
and 12 more
#VU97436 - Untrusted Pointer Dereference
CVE-2023-42772
CWE-822 Low
No
No
- 17.09.2024 SB2024091744
SB2024102309
SB2024102546
#VU97434 - Improper input validation
CVE-2024-21871
CWE-20 Low
No
No
- 17.09.2024 SB2024091744
SB2024102308
SB2024102546
#VU96745 - Incorrect Regular Expression
CVE-2024-6232
CWE-185 Medium
No
No
- 03.09.2024 SB2024090377
SB2024090927
SB2024091048
and 145 more
#VU87182 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-25869
CWE-79 Medium
No
No
- 07.03.2024 SB2024030715
SB2024040929
SB2024042411
and 9 more
#VU86052 - Use After Free
CVE-2024-25062
CWE-416 High
No
No
- 05.02.2024 SB2024020507
SB2024020508
SB2024020742
and 115 more
#VU81703 - Inefficient Regular Expression Complexity
CVE-2023-26116
CWE-1333 Medium
No
No
- 09.10.2023 SB2023081008
SB2023100921
SB2023100922
and 14 more
#VU81699 - Inefficient Regular Expression Complexity
CVE-2023-26118
CWE-1333 Medium
No
No
- 09.10.2023 SB2023081008
SB2023100921
SB2023100922
and 14 more
#VU79318 - Inefficient Regular Expression Complexity
CVE-2023-26117
CWE-1333 Medium
No
No
- 10.08.2023 SB2023081008
SB2023100921
SB2023100922
and 14 more
#VU61393 - UNIX Symbolic Link (Symlink) Following
CVE-2021-23177
CWE-61 Low
No
No
- 15.03.2022 SB2022031530
SB2022031601
SB2022032445
and 25 more
#VU23383 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14863
CWE-79 Medium
No
No
- 04.12.2019 SB2019022306
SB2022090718
SB2023060626
and 6 more
#VU23382 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10768
CWE-79 Medium
No
No
- 04.12.2019 SB2019120407
SB2022090718
SB2022120810
and 11 more
#VU20838 - Out-of-bounds read
CVE-2019-1000019
CWE-125 Medium
No
No
- 04.09.2019 SB2019090214
SB2019041207
SB2019062524
and 10 more
#VU20541 - Resource exhaustion
CVE-2019-1000020
CWE-400 Medium
No
No
- 02.09.2019 SB2019090214
SB2019041207
SB2019062524
and 10 more
#VU16729 - Improper input validation
CVE-2018-1000880
CWE-20 Low
No
No
- 27.12.2018 SB2018122014
SB2018122801
SB2019041207
and 6 more
#VU15953 - Out-of-bounds read
CVE-2016-10350
CWE-125 Low
No
No
- 19.11.2018 SB2017091705
SB2018111908
SB2018122801
and 5 more
#VU15951 - Out-of-bounds read
CVE-2016-10349
CWE-125 Low
No
No
- 19.11.2018 SB2017091705
SB2018111908
SB2018122801
and 5 more
#VU15950 - NULL Pointer Dereference
CVE-2016-10209
CWE-476 Low
No
No
- 19.11.2018 SB2017091705
SB2018111908
SB2018122801
and 4 more
#VU11835 - Heap-based Buffer Overflow
CVE-2018-6913
CWE-122 Low
No
No
- 16.04.2018 SB2018041601
SB2019090611
SB2018041717
and 15 more


Showing elements 81 - 100 out of 150