Known vulnerabilities in BIG-IP 17.1.1.2 - page 6

Software: BIG-IP
Version: 17.1.1.2
Software CPE: cpe:2.3:h:f5_networks:big-ip:*:*:*:*:*:*:*:*
Total vulnerabilities: 123
Public exploits: 10
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BIG-IP version 17.1.1.2 BIG-IP 17.1.1.2 is affected by 123 vulnerabilities: 2 critical, 4 high, 75 medium, 42 low Critical High Medium Low

Vulnerabilities (123)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94585 - Improper input validation
CVE-2024-21134
CWE-20 Low
No
No
- 18.07.2024 SB20240718165
SB20240731218
SB2024080314
and 8 more
#VU94063 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-3596
CWE-327 Medium
Public exploit available
No
- 10.07.2024 SB2024071018
SB2024071019
SB2024071020
and 114 more
#VU93545 - Server-Side Request Forgery (SSRF)
CVE-2024-39573
CWE-918 Medium
No
No
- 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 46 more
#VU93544 - Improper input validation
CVE-2024-38477
CWE-20 Medium
No
No
- 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 58 more
#VU93542 - Improper input validation
CVE-2024-38475
CWE-20 Critical
Public exploit available
No
- 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 54 more
#VU93541 - Improper input validation
CVE-2024-38474
CWE-20 Medium
No
No
- 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 57 more
#VU93540 - Improper input validation
CVE-2024-38473
CWE-20 Medium
Public exploit available
No
- 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 47 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891
CWE-200 Low
No
No
- 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 194 more
#VU89273 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-31156
CWE-79 Low
No
No
15.1.10.4, 16.1.4.3, 17.1.1.3 09.05.2024 SB2024050901
#VU87374 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-2193
CWE-362 Low
No
No
20.2.0 12.03.2024 SB20240312315
SB2024031401
SB2024031501
and 13 more
#VU86378 - Resource exhaustion
CVE-2023-50868
CWE-400 Medium
Public exploit available
No
- 13.02.2024 SB2024021325
SB2024021330
SB2024021329
and 143 more
#VU86052 - Use After Free
CVE-2024-25062
CWE-416 High
No
No
- 05.02.2024 SB2024020507
SB2024020508
SB2024020742
and 115 more
#VU71754 - Integer overflow
CVE-2022-25147
CWE-190 High
No
No
17.5.1.1 02.02.2023 SB2023020210
SB2023020212
SB2023020942
and 47 more
#VU66396 - Use After Free
CVE-2022-2586
CWE-416 Low
Public exploit available
Exploited
- 11.08.2022 SB2022081108
SB2022081110
SB2022081111
and 53 more
#VU63082 - Out-of-bounds write
CVE-2021-0153
CWE-787 Low
No
No
- 12.05.2022 SB2022051714
SB2022062304
SB2022081211
and 13 more
#VU63081 - Improper input validation
CVE-2021-0154
CWE-20 Low
No
No
- 11.05.2022 SB2022051714
SB2022062302
SB2022081211
and 13 more
#VU61393 - UNIX Symbolic Link (Symlink) Following
CVE-2021-23177
CWE-61 Low
No
No
- 15.03.2022 SB2022031530
SB2022031601
SB2022032445
and 25 more
#VU16727 - Use After Free
CVE-2018-1000878
CWE-416 Low
No
No
- 27.12.2018 SB2018122014
SB2018122801
SB2019041207
and 13 more
#VU16726 - Double Free
CVE-2018-1000877
CWE-415 Low
No
No
- 20.12.2018 SB2018122014
SB2018122801
SB2019041207
and 13 more
#VU11835 - Heap-based Buffer Overflow
CVE-2018-6913
CWE-122 Low
No
No
- 16.04.2018 SB2018041601
SB2019090611
SB2018041717
and 15 more


Showing elements 101 - 120 out of 123