Known vulnerabilities in BIG-IP AFM - page 6

Software: BIG-IP AFM
Software CPE: cpe:2.3:h:f5_networks:big-ip_afm:*:*:*:*:*:*:*:*
Total vulnerabilities: 160
Public exploits: 13
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting BIG-IP AFM BIG-IP AFM is affected by 160 known vulnerabilities: 12 high, 76 medium, 72 low Critical High Medium Low

Vulnerabilities (160)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU22976 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-6658
CWE-89 High
No
No
13.1.3.2, 14.1.2.1 26.11.2019 SB2019111904
#VU22850 - Information Exposure Through Log Files
CVE-2019-6662
CWE-532 Medium
No
No
13.1.1.5 19.11.2019 SB2019111913
#VU22832 - Resource exhaustion
CVE-2019-6660
CWE-400 Medium
No
No
13.1.3, 14.0.1.1, 14.1.2.1 19.11.2019 SB2019111904
#VU20891 - Permissions, Privileges, and Access Controls
CVE-2019-6646
CWE-264 Medium
No
No
12.1.0 05.09.2019 SB2019080825
#VU20858 - Out-of-bounds write
CVE-2017-18551
CWE-787 Low
No
No
11.6.5.3, 12.1.5.3, 13.1.3.6, 14.1.3.1, 15.1.3 04.09.2019 SB2019081914
SB2020121806
SB2020122317
and 9 more
#VU15537 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15313
CWE-79 Low
No
No
12.1.3.7, 13.1.1.2, 14.0.0 25.10.2018 SB2018102515
#VU15536 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15314
CWE-79 Low
No
No
12.1.3.7, 13.1.1.2, 14.0.0 22.10.2018 SB2018102515
#VU13524 - Improper input validation
CVE-2018-5528
CWE-20 Low
No
No
13.1.0.8 29.06.2018 SB2018062913
#VU13510 - Resource exhaustion
CVE-2018-5527
CWE-400 Low
No
No
13.1.0.8 28.06.2018 SB2018062913
#VU12849 - Improper Restriction of Excessive Authentication Attempts
CVE-2018-5506
CWE-307 Low
No
No
- 18.05.2018 SB2018051735
#VU12846 - Command injection
CVE-2018-5511
CWE-77 Low
No
No
- 18.05.2018 SB2018051735
#VU12843 - Data Handling
CVE-2017-6158
CWE-19 Medium
No
No
- 18.05.2018 SB2018051735
#VU12806 - Improper Resource Shutdown or Release
CVE-2018-5507
CWE-404 Medium
No
No
- 17.05.2018 SB2018051735
#VU12805 - Improper Resource Shutdown or Release
CVE-2017-6148
CWE-404 Medium
No
No
- 17.05.2018 SB2018051735
#VU12774 - Improper input validation
CVE-2017-6156
CWE-20 Medium
No
No
- 16.05.2018 SB2018051735
#VU12772 - Improper input validation
CVE-2017-6143
CWE-20 Low
No
No
- 16.05.2018 SB2018051735
#VU12330 - Improper Access Control
CVE-2018-5519
CWE-284 Low
No
No
- 02.05.2018 SB2018050209
#VU12329 - Improper Authentication
CVE-2018-5515
CWE-287 Medium
No
No
- 02.05.2018 SB2018050209
#VU12319 - Improper Resource Shutdown or Release
CVE-2017-6155
CWE-404 Medium
No
No
- 01.05.2018 SB2018050209
#VU12295 - Improper Resource Shutdown or Release
CVE-2018-5510
CWE-404 Medium
No
No
- 30.04.2018 SB2018050209


Showing elements 101 - 120 out of 160