Known vulnerabilities in BIG-IP AAM - page 2
Vendor:
F5 Networks
Software:
BIG-IP AAM
Software CPE:
cpe:2.3:h:f5_networks:big-ip_aam:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
144
Public exploits:
15
Known exploited (KEV):
4
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
12.1.3.3
13.1.3.3
13.1.3.1
13.1.1.4
13.1.1.3
13.1.1.2
13.1.1.1
13.1.0.7
13.1.0.5
13.1.0.4
14.1.2.2
15.1.0.3
14.1.4.2
15.1.4
12.1.6
13.1.4
16.1.0
13.1.4.1
14.1.4.3
15.1.3.1
16.0.1.2
15.1.3
11.6.5.3
12.1.5.3
14.1.4
13.1.3.6
15.1.2.1
16.0.1.1
14.1.3.1
14.1.2.8
13.1.3.5
16.0.1
15.1.1
14.1.3
15.1.2
13.0.0 HF3
12.1.2 HF2
11.6.2 HF1
15.1.0.5
14.1.2.7
16.0.0
14.1.2.5
14.1.2-0.89.37
15.0.1.4
15.1.0.4
14.1.2.6
13.1.3.4
12.1.5.2
11.6.5.2
15.0.1.3
14.1.2.4
15.0.1.2
15.1.0.2
15.1.0.1
14.1.2.3
15.1.0
13.1.3.2
12.1.5.1
15.0.1.1
14.1.0.6
14.0.0.5
11.6.5.1
11.5.7
11.5.8
11.5.9
11.5.10
11.6.5
12.1.4
12.1.5
15.0.1
15.0.0
14.1.2.1.0.122.4-ENG Hotfix
14.1.2.1.0.115.4-ENG Hotfix
14.1.2.1.0.111.4-ENG Hotfix
14.1.2.1.0.105.4-ENG Hotfix
14.1.2.1.0.99.4-ENG Hotfix
14.1.2.1.0.97.4-ENG Hotfix
14.1.2.1.0.34.4-ENG Hotfix
14.1.2.1.0.16.4-ENG Hotfix
14.1.2.1.0.14.4-ENG Hotfix
14.1.2.1.0.46.4-ENG Hotfix
14.1.2.0.32.37-ENG Hotfix
14.1.2.0.18.37-ENG Hotfix
14.1.2.0.11.37-ENG Hotfix
14.1.0.6.0.70.9-ENG Hotfix
14.1.0.6.0.68.9-ENG Hotfix
14.1.0.6.0.14.9-ENG Hotfix
14.1.0.6.0.11.9-ENG Hotfix
14.1.0.5.0.40.5-ENG Hotfix
14.1.0.5.0.36.5-ENG Hotfix
14.1.0.5.0.15.5-ENG Hotfix
14.1.0.3.0.99.6-ENG Hotfix
14.1.0.3.0.97.6-ENG Hotfix
14.1.0.3.0.79.6-ENG Hotfix
15.0.1.0.48.11-ENG Hotfix
15.0.1.0.33.11-ENG Hotfix
13.1.1.5
14.0.1
14.0.0
14.1.2
14.1.1
14.1.0
13.1.1
14.0.1.1
14.1.2.1
13.1.3
11.6.4
13.1.0.8
13.0.0 HF1
12.1.3.2
12.1.3.4
13.1.0.6
12.1.3.1
13.0.1
11.5.6
11.5.5
11.5.4 HF4
11.6.3
12.1.3
13.1.0.3
13.1.0.2
13.1.0.1
13.1.0
11.5.3
11.6.2
11.2.1
11.5.1 HF6
12.0.1
12.1.2 HF1
13.0.0
12.0.0 HF4
12.1.0 HF1
12.0.0 HF3
12.0.0 HF1
11.6.0 HF7
11.6.0 HF6
11.6.0 HF5
11.6.0
11.5.4 HF1
11.5.4
11.5.3 HF2
11.5.2
11.5.1 HF10
11.5.1
11.5.0
11.4.0 HF10
11.4.0 HF8
11.4.0 HF6
11.4.0 HF4
11.4.1 HF9
11.4.1 HF5
11.4.1
11.4.0 HF7
11.4.0
12.1.2
12.0.0
11.6.1 HF1
12.1.1
12.1.0
11.6.1
Vulnerabilities (144)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU50616 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-22978 |
CWE-79 | Low | 13.1.3.5, 14.1.3.1, 15.1.1, 16.0.1 | 11.02.2021 |
SB2021021113 |
||
| #VU50615 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2021-22974 |
CWE-362 | Medium | 13.1.3.6, 14.1.3.1, 15.1.2, 16.0.1.1 | 11.02.2021 |
SB2021021111 SB2021021112 |
||
| #VU50612 - Resource exhaustion CVE-2021-22975 |
CWE-400 | Medium | 14.1.3.1, 15.1.2.1, 16.0.1.1 | 11.02.2021 |
SB2021021108 |
||
| #VU50611 - Improper input validation CVE-2021-22977 |
CWE-20 | Medium | 14.1.3.1, 16.0.1.1 | 11.02.2021 |
SB2021021108 |
||
| #VU50610 - Out-of-bounds write CVE-2021-22973 |
CWE-787 | Medium | 13.1.3.5, 14.1.3.1, 15.1.2, 16.0.1.1 | 11.02.2021 |
SB2021021107 |
||
| #VU50609 - Cryptographic Issues CVE-2021-22981 |
CWE-310 | Low | - | 11.02.2021 | - | ||
| #VU50608 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-22979 |
CWE-79 | Medium | 13.1.3.5, 14.1.2.8, 15.1.1, 16.0.1 | 11.02.2021 |
SB2021021105 |
||
| #VU49080 - Improper input validation CVE-2020-27727 |
CWE-20 | Low | 13.1.3.5, 14.1.3.1, 15.1.1, 16.0.1.1 | 17.12.2020 |
SB2020121734 |
||
| #VU49078 - Resource exhaustion CVE-2020-27715 |
CWE-400 | Medium | 14.1.3.1, 15.1.1 | 17.12.2020 |
SB2020121731 |
||
| #VU49067 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-27719 |
CWE-79 | Low | 14.1.3.1, 15.1.1, 16.0.1 | 17.12.2020 |
SB2020121723 |
||
| #VU48895 - Improper Check for Certificate Revocation CVE-2020-8286 |
CWE-299 | Medium | - | 09.12.2020 | - | ||
| #VU48896 - NULL Pointer Dereference CVE-2020-1971 |
CWE-476 | Medium | - | 08.12.2020 | - | ||
| #VU48815 - Improper Control of Generation of Code ('Code Injection') CVE-2020-17530 |
CWE-94 | High | - | 08.12.2020 | - | ||
| #VU49150 - Use of Insufficiently Random Values CVE-2020-25705 |
CWE-330 | Medium | - | 17.11.2020 | - | ||
| #VU50427 - Out-of-bounds read CVE-2020-10769 |
CWE-125 | Low | - | 26.06.2020 | - | ||
| #VU21059 - Heap-based Buffer Overflow CVE-2019-5482 |
CWE-122 | Medium | 13.1.4.1, 14.1.4.2, 15.1.4, 16.0.1.2, 16.1.0 | 11.09.2019 |
SB2019091142 SB2019091143 SB2019091201 and 28 more |
||
| #VU13023 - Use After Free CVE-2018-10675 |
CWE-416 | Low | - | 28.05.2018 | - | ||
| #VU12992 - Buffer overflow CVE-2018-1126 |
CWE-120 | High | - | 23.05.2018 | - | ||
| #VU12977 - Integer overflow CVE-2018-1124 |
CWE-190 | Low | - | 22.05.2018 | - | ||
| #VU12975 - Permissions, Privileges, and Access Controls CVE-2018-1122 |
CWE-264 | Low | - | 22.05.2018 | - |
Showing elements 21 - 40 out of 144