Known vulnerabilities in BIG-IP 17.1.1.2 - page 3

Software: BIG-IP
Version: 17.1.1.2
Software CPE: cpe:2.3:h:f5_networks:big-ip:*:*:*:*:*:*:*:*
Total vulnerabilities: 123
Public exploits: 10
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BIG-IP version 17.1.1.2 BIG-IP 17.1.1.2 is affected by 123 vulnerabilities: 2 critical, 4 high, 75 medium, 42 low Critical High Medium Low

Vulnerabilities (123)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU108775 - Resource exhaustion
CVE-2025-36504
CWE-400 Medium
No
No
16.1.6, 17.1.2, 20.3.0 07.05.2025 SB2025050780
#VU108771 - NULL Pointer Dereference
CVE-2025-41433
CWE-476 Medium
No
No
16.1.5, 17.1.2 07.05.2025 SB2025050775
#VU108770 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-31644
CWE-78 Low
No
No
15.1.10.7, 16.1.6, 17.1.2.2 07.05.2025 SB2025050774
#VU108765 - Improper input validation
CVE-2025-41414
CWE-20 Medium
No
No
16.1.5, 17.1.2 07.05.2025 SB2025050755
#VU108764 - Improper input validation
CVE-2025-36557
CWE-20 Medium
No
No
16.1.5, 17.1.2 07.05.2025 SB2025050755
#VU105094 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-24320
CWE-79 Low
No
No
15.1.10.6, 16.1.5.2, 17.1.2 27.02.2025 SB20250227197
#VU104179 - Command injection
CVE-2025-23239
CWE-77 Low
No
No
17.1.2 25.02.2025 SB2025022542
#VU103436 - Resource exhaustion
CVE-2024-11187
CWE-400 Medium
No
No
- 29.01.2025 SB2025012962
SB2025012964
SB2025012965
and 83 more
#VU95157 - Incorrect Provision of Specified Functionality
CVE-2024-4032
CWE-684 Medium
No
No
- 02.08.2024 SB2024080203
SB2024080207
SB2024080209
and 101 more
#VU87337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28757
CWE-611 Medium
No
No
17.1.2.2 11.03.2024 SB2024031135
SB2024031143
SB2024031144
and 74 more
#VU82299 - Heap-based Buffer Overflow
CVE-2023-45853
CWE-122 Medium
No
No
- 23.10.2023 SB2023102325
SB2023102633
SB2023102634
and 40 more
#VU64396 - Observable discrepancy
CVE-2022-23823
CWE-203 Medium
No
No
- 15.06.2022 SB2022061516
SB20250227198
SB20250227199
and 1 more
#VU64378 - Observable discrepancy
CVE-2022-24436
CWE-203 Medium
No
No
- 14.06.2022 SB2022061501
SB20250227202
SB20250227203
and 1 more
#VU61246 - Use After Free
CVE-2021-4083
CWE-416 Low
No
No
17.5.1 10.03.2022 SB2022031029
SB2022031033
SB2022031034
and 55 more
#VU55423 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-33037
CWE-444 Medium
No
No
- 29.07.2021 SB2021072907
SB2021080807
SB2021080808
and 30 more
#VU48587 - Allocation of Resources Without Limits or Throttling
CVE-2020-8037
CWE-770 Medium
No
No
- 04.11.2020 SB2020110433
SB2020112103
SB2021042704
and 12 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022
CWE-79 Low
Public exploit available
No
- 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU25002 - Session Fixation
CVE-2019-17563
CWE-384 Low
No
No
- 06.02.2020 SB2019121315
SB2020011492
SB2020011519
and 16 more
#VU6663 - Out-of-bounds read
CVE-2016-9840
CWE-125 Low
No
No
- 24.05.2017 SB2017052312
SB2017052405
SB2017052406
and 47 more
#VU6664 - Out-of-bounds read
CVE-2016-9841
CWE-125 Low
No
No
- 24.05.2017 SB2017052312
SB2017052405
SB2017052406
and 34 more


Showing elements 41 - 60 out of 123