Known vulnerabilities in BIG-IP 17.0.0 - page 3

Software: BIG-IP
Version: 17.0.0
Software CPE: cpe:2.3:h:f5_networks:big-ip:*:*:*:*:*:*:*:*
Total vulnerabilities: 127
Public exploits: 12
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BIG-IP version 17.0.0 BIG-IP 17.0.0 is affected by 127 vulnerabilities: 2 critical, 5 high, 71 medium, 49 low Critical High Medium Low

Vulnerabilities (127)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98758 - Missing Authentication for Critical Function
CVE-2024-45844
CWE-306 Low
Public exploit available
No
15.1.10.5, 16.1.5, 17.1.1.4 16.10.2024 SB20241016109
#VU98050 - Resource exhaustion
CVE-2024-41996
CWE-400 Medium
No
No
- 06.10.2024 SB2024100601
SB2024100602
SB2024100603
and 13 more
#VU97436 - Untrusted Pointer Dereference
CVE-2023-42772
CWE-822 Low
No
No
- 17.09.2024 SB2024091744
SB2024102309
SB2024102546
#VU97434 - Improper input validation
CVE-2024-21871
CWE-20 Low
No
No
- 17.09.2024 SB2024091744
SB2024102308
SB2024102546
#VU96745 - Incorrect Regular Expression
CVE-2024-6232
CWE-185 Medium
No
No
- 03.09.2024 SB2024090377
SB2024090927
SB2024091048
and 145 more
#VU89895 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-52881
CWE-451 Medium
No
No
- 29.05.2024 SB2024052952
SB2024070462
SB2024070904
and 69 more
#VU86230 - Resource exhaustion
CVE-2023-52425
CWE-400 Medium
No
No
- 07.02.2024 SB2024020750
SB2024020754
SB2024020765
and 120 more
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51385
CWE-78 Medium
Public exploit available
No
- 26.12.2023 SB2023121905
SB2023122710
SB2023122801
and 65 more
#VU81703 - Inefficient Regular Expression Complexity
CVE-2023-26116
CWE-1333 Medium
No
No
- 09.10.2023 SB2023081008
SB2023100921
SB2023100922
and 14 more
#VU78696 - Improper Certificate Validation
CVE-2023-34410
CWE-295 Medium
No
No
- 26.07.2023 SB2023072654
SB2023072656
SB2023072657
and 28 more
#VU76668 - Memory corruption
CVE-2023-32763
CWE-119 High
No
No
- 30.05.2023 SB2023053068
SB2023070436
SB2023071741
and 17 more
#VU76666 - Cleartext Transmission of Sensitive Information
CVE-2023-32762
CWE-319 Medium
No
No
- 30.05.2023 SB2023053067
SB2023072656
SB2023072905
and 16 more
#VU76665 - Divide By Zero
CVE-2023-32573
CWE-369 Medium
No
No
- 30.05.2023 SB2023053067
SB2023072568
SB2023072625
and 28 more
#VU23382 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10768
CWE-79 Medium
No
No
- 04.12.2019 SB2019120407
SB2022090718
SB2022120810
and 11 more
#VU20838 - Out-of-bounds read
CVE-2019-1000019
CWE-125 Medium
No
No
- 04.09.2019 SB2019090214
SB2019041207
SB2019062524
and 10 more
#VU20541 - Resource exhaustion
CVE-2019-1000020
CWE-400 Medium
No
No
- 02.09.2019 SB2019090214
SB2019041207
SB2019062524
and 10 more
#VU16729 - Improper input validation
CVE-2018-1000880
CWE-20 Low
No
No
- 27.12.2018 SB2018122014
SB2018122801
SB2019041207
and 6 more
#VU15953 - Out-of-bounds read
CVE-2016-10350
CWE-125 Low
No
No
- 19.11.2018 SB2017091705
SB2018111908
SB2018122801
and 5 more
#VU15951 - Out-of-bounds read
CVE-2016-10349
CWE-125 Low
No
No
- 19.11.2018 SB2017091705
SB2018111908
SB2018122801
and 5 more
#VU15950 - NULL Pointer Dereference
CVE-2016-10209
CWE-476 Low
No
No
- 19.11.2018 SB2017091705
SB2018111908
SB2018122801
and 4 more


Showing elements 41 - 60 out of 127