Known vulnerabilities in BIG-IP - page 17
Vendor:
F5 Networks
Software:
BIG-IP
Software CPE:
cpe:2.3:h:f5_networks:big-ip:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
380
Public exploits:
33
Known exploited (KEV):
9
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
17.5.1.7
17.1.3.3
17.1.3.4
17.5.1.8
21.0.0.3
21.1.0.1
17.5.1.2
17.1.3.2
17.5.1.6
17.5.1.5
21.0.0.1
21.0.0.2
12.1.3.6
12.1.3.5
12.1.3.4
12.1.3.3
13.1.3.3
13.1.3.1
13.1.1.1
13.1.0.7
13.1.0.6
13.1.0.5
13.1.0.3
13.1.0.2
13.1.0.1
21.0.0
17.1.3.1
17.5.1.4
16.1.6.1
17.1.3
17.5.1.3
15.1.10.8
17.5.1.1
16.1.6.0.27.3
17.1.2.2.0.259.12
17.5.1.0.80.7
17.5.1
15.1.10.7
16.1.6
17.1.2.2
17.5.0
16.1.5.1
15.1.10.6
16.1.5.2
17.1.2.1
15.1.10.6.0.11.6
15.1.10.6.0.11
16.1.5.2.0.7.5
17.1.2
20.3.0
15.1.10.5
17.1.1.4
20.2.1
20.2.0
20.1.0
20.0.2
20.0.1
14.1.4.1
14.1.2.2
14.1.0.6
14.1.0.5
14.1.0.4
14.1.0.3
14.1.0.2
14.1.0.1
16.1.3.4
15.1.8.2
15.1.0.3
16.1.5
17.1.0.1
15.1.10.4
15.1.10.3
15.1.10.1
16.1.4.3
16.1.4.2
17.1.1.3
17.1.1.2
17.1.1.1
17.1.1
13.1.5.1 + hotfix-bigip-13.1.5.1.0.20.2-eng3
14.1.5.6 + hotfix-bigip-14.1.5.6.0.10.6-eng3
15.1.10.2 + hotfix-bigip-15.1.10.2.0.44.2-eng3
16.1.4.1 + hotfix-bigip-16.1.4.1.0.50.5-eng3
17.1.0.3 + hotfix-bigip-17.1.0.3.0.75.4-eng3
16.1.4
15.1.10
15.1.9
17.1.0.3
16.1.4.1
15.1.10.2
14.1.5.6
14.1.5.5
15.1.9.1
16.1.3.5
17.1.0.2
17.1.0
16.1.3.2
14.1.5.2
14.1.5.3
15.1.8.1
16.1.3.3
17.0.0.2
15.1.8
15.1.7
17.0.0.1
14.1.5.1
15.1.6.1
16.1.3.1
14.1.5
15.1.6
16.1.3
17.0.0
16.1.2.2
13.1.5
14.1.4.6
15.1.5.1
15.1.5
16.1.2.1
14.1.4.5
15.1.4.1
14.1.4.4
16.1.2
16.1.1
15.1.4
13.1.4.1
14.1.4.3
15.1.3.1
16.0.1.2
16.1.0
13.1.0.8
14.1.4.2
12.1.6
13.1.4
15.1.3
14.1.4.0.120.11
16.0.1.1.9.6
11.6.5.3
12.1.5.3
14.1.4
13.1.3.6
15.1.2.1
16.0.1.1
14.1.3.1
14.1.2.8
13.1.3.5
14.1.3
16.0.1
15.1.2
15.1.1
13.0.0 HF3
12.1.2 HF2
11.6.2 HF1
15.1.0.5
14.1.2.7
16.0.0
14.1.2.5
14.1.2-0.89.37
15.0.1.4
15.1.0.4
14.1.2.6
13.1.3.4
12.1.5.2
11.6.5.2
15.0.1.3
14.1.2.4
15.0.1.2
15.1.0.2
15.1.0.1
14.1.1
12.1.5.1
Hotfix-BIGIP-14.1.0.2.0.62.4-ENG
Hotfix-BIGIP-14.1.0.2.0.45.4-ENG
Hotfix-BIGIP-11.5.4.2.74.291-HF2
Hotfix-BIGIP-12.1.4.1.0.97.6-ENG
Hotfix-BIGIP-14.1.2.1.0.83.4-ENG
11.6.5.1
15.0.1.1
14.1.2.1
14.0.1.1
13.1.3.2
14.1.2.3
15.1.0
11.5.10
14.1.2.1.0.122.4-ENG Hotfix
14.1.2.1.0.115.4-ENG Hotfix
14.1.2.1.0.111.4-ENG Hotfix
14.1.2.1.0.105.4-ENG Hotfix
14.1.2.1.0.99.4-ENG Hotfix
14.1.2.1.0.97.4-ENG Hotfix
14.1.2.1.0.34.4-ENG Hotfix
14.1.2.1.0.16.4-ENG Hotfix
14.1.2.1.0.14.4-ENG Hotfix
14.1.2.1.0.46.4-ENG Hotfix
14.1.2.0.32.37-ENG Hotfix
14.1.2.0.18.37-ENG Hotfix
14.1.2.0.11.37-ENG Hotfix
14.1.0.6.0.70.9-ENG Hotfix
14.1.0.6.0.68.9-ENG Hotfix
14.1.0.6.0.14.9-ENG Hotfix
14.1.0.6.0.11.9-ENG Hotfix
14.1.0.5.0.40.5-ENG Hotfix
14.1.0.5.0.36.5-ENG Hotfix
14.1.0.5.0.15.5-ENG Hotfix
14.1.0.3.0.99.6-ENG Hotfix
14.1.0.3.0.97.6-ENG Hotfix
14.1.0.3.0.79.6-ENG Hotfix
15.0.1.0.48.11-ENG Hotfix
15.0.1.0.33.11-ENG Hotfix
11.5.7
11.5.8
11.5.9
11.6.4
11.6.5
12.1.4
12.1.5
13.1.3
14.0.1
14.1.0
14.1.2
15.0.0
15.0.1
14.0.0.3
13.1.1
14.0.0
13.1.1.2
12.1.3.7
13.0.0 HF1
12.1.2 HF1
13.0.0
13.1.0
13.1.0.4
13.0.1
12.1.3.2
12.1.3.1
12.1.3.0
12.1.3
11.6.3.2
11.6.3.1
11.6.3
11.6.2
11.5.6
11.5.5
9.1.0 cr69440
9.1.0
12.1.1 HF2
12.1.1 HF1
12.1.0 HF2
12.1.0 HF1
12.0.0 HF4
12.0.0 HF3
12.0.0 HF2
12.0.0 HF1
11.6.1 HF1
11.6.0 HF8
11.6.0 HF7
11.6.0 HF6
11.6.0 HF5
11.6.0 HF4
11.6.0 HF3
11.6.0 HF2
11.6.0 HF1
11.5.4 HF2
11.5.4 HF1
11.5.3 HF2
11.5.3 HF1
11.5.2 HF1
11.5.1 HF11
11.5.1 HF10
11.5.1 HF9
11.5.1 HF8
11.5.1 HF7
11.5.1 HF6
11.5.1 HF5
11.5.1 HF4
11.5.1 HF3
11.5.1 HF2
11.5.1 HF1
11.5.0 HF7
11.5.0 HF6
11.5.0 HF5
11.5.0 HF4
11.5.0 HF3
11.5.0 HF2
11.5.0 HF1
11.4.1 HF11
11.4.1 HF10
11.4.1 HF9
11.4.1 HF8
11.4.1 HF7
11.4.1 HF6
11.4.1 HF5
11.4.1 HF4
11.4.1 HF3
11.4.1 HF2
11.4.1 HF1
11.4.0 HF10
11.4.0 HF9
11.4.0 HF8
11.4.0 HF7
11.4.0 HF6
11.4.0 HF5
11.4.0 HF4
11.4.0 HF3
11.4.0 HF2
11.4.0 HF1
11.3.0 HF10
11.3.0 HF9
11.3.0 HF8
11.3.0 HF7
11.3.0 HF6
11.3.0 HF5
11.3.0 HF4
11.3.0 HF3
11.3.0 HF2
11.3.0 HF1
11.2.1 HF16
11.2.1 HF15
11.2.1 HF14
11.2.1 HF13
11.2.1 HF12
11.2.1 HF11
11.2.1 HF10
11.2.1 HF9
11.2.1 HF8
11.2.1 HF7
11.2.1 HF6
11.2.1 HF5
11.2.1 HF4
11.2.1 HF3
11.2.1 HF2
11.2.1 HF1
11.2.0 HF7
11.2.0 HF6
11.2.0 HF5
11.2.0 HF4
11.2.0 HF3
11.2.0 HF2
11.2.0 HF1
11.1.0 HF10
11.1.0 HF9
11.1.0 HF8
11.1.0 HF7
11.1.0 HF6
11.1.0 HF5
11.1.0 HF4
11.1.0 HF3
11.1.0 HF2
11.1.0 HF1
11.0.0 HF5
11.0.0 HF4
11.0.0 HF3
11.0.0 HF2
11.0.0 HF1
10.2.4 HF13
10.2.4 HF12
10.2.4 HF11
10.2.4 HF10
10.2.4 HF9
10.2.4 HF8
10.2.4 HF7
10.2.4 HF6
10.2.4 HF5
10.2.4 HF4
10.2.4 HF3
10.2.4 HF2
10.2.4 HF1
10.2.3 HF1
10.2.2 HF4
10.2.2 HF3
10.2.2 HF2
10.2.2 HF1
10.2.1 HF3
10.2.1 HF2
10.2.1 HF1
10.2.0 HF2
10.2.0 HF1
10.0.1 HF4
10.0.1 HF3
10.0.1 HF2
10.0.1 HF1
10.0.0 HF3
10.0.0 HF2
10.0.0 HF1
9.4.8 HF6
9.4.8 HF5
9.4.8 HF4
9.4.8 HF3
9.4.8 HF2
9.4.8 HF1
9.4.7 HF2
9.4.7 HF1
9.4.6 HF3
9.4.6 HF2
9.4.6 HF1
9.4.5 HF3
9.4.5 HF2
9.4.5 HF1
9.4.3 HF4
9.4.3 HF3
9.4.3 HF2
9.4.3 HF1
9.4.1 HF2
9.4.1 HF1
9.4.0 HF4
9.4.0 HF3
9.4.0 HF2
9.4.0 HF1
9.3.1 HF8
9.3.1 HF7
9.3.1 HF6
9.3.1 HF5
9.3.1 HF4
9.3.1 HF3
9.3.1 HF2
9.3.1 HF1
9.3.0 HF3
9.3.0 HF2
9.3.0 HF1
9.1.3 HF1
9.1.2 HF8
9.1.2 HF7
9.1.2 HF6
9.1.2 HF5
9.1.2 HF4
9.1.2 HF3
9.1.2 HF2
9.1.2 HF1
9.1.1 r69440
12.1.2
12.1.1
11.4.1
11.4.0
11.3.0
11.2.1
11.2.0
11.1.0
11.0.0
10.2.4
10.2.3
10.2.2
10.2.1
10.2.0
10.1.0
10.0.1
10.0.0
9.6.1
9.4.8
9.4.7
9.4.6
9.4.5
9.4.4
9.4.3
9.4.2
9.4.1
9.4.0
9.3.1
9.3.0
9.1.3
9.1.2
9.1.1
11.5.1
11.5.0
11.5.4
11.5.3
11.5.2
11.6.0
11.6.1
12.0.0
12.1.0
Vulnerabilities (380)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU46071 - Improper Certificate Validation CVE-2020-5913 |
CWE-295 | Medium | 12.1.5.2, 14.1.2-0.89.37, 14.1.2.5, 15.1.0.2, 16.0.0 | 26.08.2020 |
SB2020082607 |
||
| #VU31791 - Permissions, Privileges, and Access Controls CVE-2020-5907 |
CWE-264 | Low | 11.6.5.2, 12.1.5.2, 13.1.3.4, 14.1.2.4, 15.0.1.4, 15.1.0.4 | 23.07.2020 |
SB2020070133 |
||
| #VU31790 - Incorrect Default Permissions CVE-2020-5906 |
CWE-276 | Medium | 12.1.5.2, 13.1.3.4 | 23.07.2020 |
SB2020070134 |
||
| #VU31789 - Cross-Site Request Forgery (CSRF) CVE-2020-5904 |
CWE-352 | Low | 12.1.5.2, 13.1.3.4, 14.1.2.6, 15.0.1.4, 15.1.0.4 | 23.07.2020 |
SB2020070134 |
||
| #VU31788 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-5903 |
CWE-79 | Low | 12.1.5.2, 13.1.3.4, 14.1.2.6, 15.0.1.4, 15.1.0.4 | 23.07.2020 |
SB2020070134 |
||
| #VU29442 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-5902 |
CWE-78 | High | 11.6.5.2, 12.1.5.2, 13.1.3.4, 14.1.2.6, 15.1.0.4 | 01.07.2020 |
SB2020070120 |
||
| #VU27561 - Improper input validation CVE-2020-5872 |
CWE-20 | Medium | 12.1.5, 13.1.3.2, 14.0.1.1, 14.1.2.4, 15.0.0 | 06.05.2020 |
SB2020050613 |
||
| #VU27528 - Improper input validation CVE-2020-5875 |
CWE-20 | Medium | 14.1.2.4, 15.0.1.1, 15.1.0 | 05.05.2020 |
SB2020050510 |
||
| #VU27520 - Missing Encryption of Sensitive Data CVE-2020-5886 |
CWE-311 | Medium | 14.1.2.4, 15.1.0.2 | 05.05.2020 |
SB2020050509 |
||
| #VU27518 - Security Features CVE-2020-5884 |
CWE-254 | Medium | 16.0.0 | 05.05.2020 |
SB2020050507 |
||
| #VU27517 - Improper Authentication CVE-2020-5888 |
CWE-287 | Medium | 14.1.2.4, 15.0.1.3, 15.1.0.2 | 05.05.2020 |
SB2020050509 |
||
| #VU27467 - Unrestricted Upload of File with Dangerous Type CVE-2020-5880 |
CWE-434 | Medium | 14.1.2.4, 15.1.0 | 30.04.2020 |
SB2020043025 |
||
| #VU27466 - Exposure of sensitive information to an unauthorized actor |
CWE-200 | Medium | 14.1.2.4, 15.0.1.3, 15.1.0 | 30.04.2020 |
SB2020043025 |
||
| #VU27395 - Authentication Bypass by Spoofing CVE-2020-11868 |
CWE-290 | Low | - | 28.04.2020 | - | ||
| #VU26465 - Improper input validation CVE-2020-5857 |
CWE-20 | Medium | 12.1.5.1, 13.1.3.2, 14.1.2.3, 15.0.1.1, 15.1.0 | 30.03.2020 |
SB2020033010 |
||
| #VU26463 - Command injection CVE-2020-5858 |
CWE-77 | Low | 12.1.5.1, 14.1.2.3, 15.1.0 | 30.03.2020 |
SB2020033010 |
||
| #VU26461 - Improper input validation CVE-2020-5862 |
CWE-20 | Low | 14.1.2.3, 15.0.1.2, 15.1.0.2 | 30.03.2020 |
SB2020033009 |
||
| #VU26460 - Improper input validation CVE-2020-5859 |
CWE-20 | Medium | 15.1.0.2 | 30.03.2020 |
SB2020033010 |
||
| #VU26459 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-5860 |
CWE-300 | Medium | - | 30.03.2020 | - | ||
| #VU26456 - Missing release of memory after effective lifetime CVE-2020-5861 |
CWE-401 | Low | 12.1.5.1 | 30.03.2020 |
SB2020033010 |
Showing elements 321 - 340 out of 380