Known vulnerabilities in BIG-IP AAM - page 5
Vendor:
F5 Networks
Software:
BIG-IP AAM
Software CPE:
cpe:2.3:h:f5_networks:big-ip_aam:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
144
Public exploits:
15
Known exploited (KEV):
4
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
12.1.3.3
13.1.3.3
13.1.3.1
13.1.1.4
13.1.1.3
13.1.1.2
13.1.1.1
13.1.0.7
13.1.0.5
13.1.0.4
14.1.2.2
15.1.0.3
14.1.4.2
15.1.4
12.1.6
13.1.4
16.1.0
13.1.4.1
14.1.4.3
15.1.3.1
16.0.1.2
15.1.3
11.6.5.3
12.1.5.3
14.1.4
13.1.3.6
15.1.2.1
16.0.1.1
14.1.3.1
14.1.2.8
13.1.3.5
16.0.1
15.1.1
14.1.3
15.1.2
13.0.0 HF3
12.1.2 HF2
11.6.2 HF1
15.1.0.5
14.1.2.7
16.0.0
14.1.2.5
14.1.2-0.89.37
15.0.1.4
15.1.0.4
14.1.2.6
13.1.3.4
12.1.5.2
11.6.5.2
15.0.1.3
14.1.2.4
15.0.1.2
15.1.0.2
15.1.0.1
14.1.2.3
15.1.0
13.1.3.2
12.1.5.1
15.0.1.1
14.1.0.6
14.0.0.5
11.6.5.1
11.5.7
11.5.8
11.5.9
11.5.10
11.6.5
12.1.4
12.1.5
15.0.1
15.0.0
14.1.2.1.0.122.4-ENG Hotfix
14.1.2.1.0.115.4-ENG Hotfix
14.1.2.1.0.111.4-ENG Hotfix
14.1.2.1.0.105.4-ENG Hotfix
14.1.2.1.0.99.4-ENG Hotfix
14.1.2.1.0.97.4-ENG Hotfix
14.1.2.1.0.34.4-ENG Hotfix
14.1.2.1.0.16.4-ENG Hotfix
14.1.2.1.0.14.4-ENG Hotfix
14.1.2.1.0.46.4-ENG Hotfix
14.1.2.0.32.37-ENG Hotfix
14.1.2.0.18.37-ENG Hotfix
14.1.2.0.11.37-ENG Hotfix
14.1.0.6.0.70.9-ENG Hotfix
14.1.0.6.0.68.9-ENG Hotfix
14.1.0.6.0.14.9-ENG Hotfix
14.1.0.6.0.11.9-ENG Hotfix
14.1.0.5.0.40.5-ENG Hotfix
14.1.0.5.0.36.5-ENG Hotfix
14.1.0.5.0.15.5-ENG Hotfix
14.1.0.3.0.99.6-ENG Hotfix
14.1.0.3.0.97.6-ENG Hotfix
14.1.0.3.0.79.6-ENG Hotfix
15.0.1.0.48.11-ENG Hotfix
15.0.1.0.33.11-ENG Hotfix
13.1.1.5
14.0.1
14.0.0
14.1.2
14.1.1
14.1.0
13.1.1
14.0.1.1
14.1.2.1
13.1.3
11.6.4
13.1.0.8
13.0.0 HF1
12.1.3.2
12.1.3.4
13.1.0.6
12.1.3.1
13.0.1
11.5.6
11.5.5
11.5.4 HF4
11.6.3
12.1.3
13.1.0.3
13.1.0.2
13.1.0.1
13.1.0
11.5.3
11.6.2
11.2.1
11.5.1 HF6
12.0.1
12.1.2 HF1
13.0.0
12.0.0 HF4
12.1.0 HF1
12.0.0 HF3
12.0.0 HF1
11.6.0 HF7
11.6.0 HF6
11.6.0 HF5
11.6.0
11.5.4 HF1
11.5.4
11.5.3 HF2
11.5.2
11.5.1 HF10
11.5.1
11.5.0
11.4.0 HF10
11.4.0 HF8
11.4.0 HF6
11.4.0 HF4
11.4.1 HF9
11.4.1 HF5
11.4.1
11.4.0 HF7
11.4.0
12.1.2
12.0.0
11.6.1 HF1
12.1.1
12.1.0
11.6.1
Vulnerabilities (144)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU26460 - Improper input validation CVE-2020-5859 |
CWE-20 | Medium | 15.1.0.2 | 30.03.2020 |
SB2020033010 |
||
| #VU26459 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-5860 |
CWE-300 | Medium | - | 30.03.2020 | - | ||
| #VU25007 - Improper input validation CVE-2020-5854 |
CWE-20 | Medium | 12.1.5.1, 13.1.3.2, 14.0.1.1, 14.1.2.1, 15.1.0 | 06.02.2020 |
SB2020020608 |
||
| #VU25004 - Improper input validation CVE-2020-5856 |
CWE-20 | Low | 14.1.2.3, 15.1.0 | 06.02.2020 |
SB2020020605 |
||
| #VU23102 - Resource exhaustion CVE-2019-6667 |
CWE-400 | Medium | 11.6.5.1, 12.1.5, 13.1.3, 14.0.0.5, 14.1.0.6, 15.0.1.1 | 29.11.2019 |
SB2019112909 |
||
| #VU22978 - Reliance on Reverse DNS Resolution for a Security-Critical Action CVE-2019-6663 |
CWE-350 | Low | - | 26.11.2019 | - | ||
| #VU22977 - Permissions, Privileges, and Access Controls CVE-2019-6664 |
CWE-264 | Low | 14.1.2, 15.0.1 | 26.11.2019 |
SB2019112602 |
||
| #VU22975 - Improper Authentication CVE-2019-6675 |
CWE-287 | High | - | 26.11.2019 | - | ||
| #VU22850 - Information Exposure Through Log Files CVE-2019-6662 |
CWE-532 | Medium | 13.1.1.5 | 19.11.2019 |
SB2019111913 |
||
| #VU22832 - Resource exhaustion CVE-2019-6660 |
CWE-400 | Medium | 13.1.3, 14.0.1.1, 14.1.2.1 | 19.11.2019 |
SB2019111904 |
||
| #VU20891 - Permissions, Privileges, and Access Controls CVE-2019-6646 |
CWE-264 | Medium | 12.1.0 | 05.09.2019 |
SB2019080825 |
||
| #VU20858 - Out-of-bounds write CVE-2017-18551 |
CWE-787 | Low | 11.6.5.3, 12.1.5.3, 13.1.3.6, 14.1.3.1, 15.1.3 | 04.09.2019 |
SB2019081914 SB2020121806 SB2020122317 and 9 more |
||
| #VU13524 - Improper input validation CVE-2018-5528 |
CWE-20 | Low | 13.1.0.8 | 29.06.2018 |
SB2018062913 |
||
| #VU13510 - Resource exhaustion CVE-2018-5527 |
CWE-400 | Low | 13.1.0.8 | 28.06.2018 |
SB2018062913 |
||
| #VU12849 - Improper Restriction of Excessive Authentication Attempts CVE-2018-5506 |
CWE-307 | Low | - | 18.05.2018 | - | ||
| #VU12846 - Command injection CVE-2018-5511 |
CWE-77 | Low | - | 18.05.2018 | - | ||
| #VU12843 - Data Handling CVE-2017-6158 |
CWE-19 | Medium | - | 18.05.2018 | - | ||
| #VU12806 - Improper Resource Shutdown or Release CVE-2018-5507 |
CWE-404 | Medium | - | 17.05.2018 | - | ||
| #VU12805 - Improper Resource Shutdown or Release CVE-2017-6148 |
CWE-404 | Medium | - | 17.05.2018 | - | ||
| #VU12774 - Improper input validation CVE-2017-6156 |
CWE-20 | Medium | - | 16.05.2018 | - |
Showing elements 81 - 100 out of 144