Known vulnerabilities in BIG-IP APM - page 7

Software: BIG-IP APM
Software CPE: cpe:2.3:h:f5_networks:big-ip_apm:*:*:*:*:*:*:*:*
Total vulnerabilities: 193
Public exploits: 15
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting BIG-IP APM BIG-IP APM is affected by 193 known vulnerabilities: 1 critical, 14 high, 87 medium, 91 low Critical High Medium Low

Vulnerabilities (193)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU25007 - Improper input validation
CVE-2020-5854
CWE-20 Medium
No
No
12.1.5.1, 13.1.3.2, 14.0.1.1, 14.1.2.1, 15.1.0 06.02.2020 SB2020020608
#VU24237 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5853
CWE-79 Low
No
No
- 14.01.2020 SB2020011415
#VU23805 - Cleartext Storage of Sensitive Information
CVE-2019-19150
CWE-312 Low
No
No
13.1.3.2, 14.0.1.1, 14.1.2.1, 15.1.0 24.12.2019 SB2019122401
#VU23102 - Resource exhaustion
CVE-2019-6667
CWE-400 Medium
No
No
11.6.5.1, 12.1.5, 13.1.3, 14.0.0.5, 14.1.0.6, 15.0.1.1 29.11.2019 SB2019112909
#VU22978 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2019-6663
CWE-350 Low
No
No
- 26.11.2019 SB2019112603
#VU22977 - Permissions, Privileges, and Access Controls
CVE-2019-6664
CWE-264 Low
No
No
14.1.2, 15.1.0 26.11.2019 SB2019112602
#VU22975 - Improper Authentication
CVE-2019-6675
CWE-287 High
No
No
- 26.11.2019 SB2019112601
#VU22850 - Information Exposure Through Log Files
CVE-2019-6662
CWE-532 Medium
No
No
13.1.1.5 19.11.2019 SB2019111913
#VU22832 - Resource exhaustion
CVE-2019-6660
CWE-400 Medium
No
No
13.1.3, 14.0.1.1, 14.1.2.1 19.11.2019 SB2019111904
#VU22712 - Memory corruption
CVE-2018-12207
CWE-119 Low
No
No
13.1.3.2, 14.0.1.1, 14.1.2.1, 15.1.0 12.11.2019 SB2019111221
SB2019111301
SB2019111332
and 38 more
#VU20891 - Permissions, Privileges, and Access Controls
CVE-2019-6646
CWE-264 Medium
No
No
12.1.0 05.09.2019 SB2019080825
#VU20858 - Out-of-bounds write
CVE-2017-18551
CWE-787 Low
No
No
11.6.5.3, 12.1.5.3, 13.1.3.6 2, 14.1.3.1, 15.1.3 04.09.2019 SB2019081914
SB2020121806
SB2020122317
and 9 more
#VU16777 - Cross-Site Request Forgery (CSRF)
CVE-2018-15334
CWE-352 Low
No
No
- 02.01.2019 SB2018122706
#VU16775 - Permissions, Privileges, and Access Controls
CVE-2018-15335
CWE-264 Low
No
No
14.0.0 02.01.2019 SB2018122707
#VU15465 - Permissions, Privileges, and Access Controls
CVE-2018-15316
CWE-264 Low
No
No
13.1.1.2 22.10.2018 SB2018102303
#VU14463 - Permissions, Privileges, and Access Controls
CVE-2018-5546
CWE-264 Low
No
No
7.1.7.1 20.08.2018 SB2018082011
#VU14462 - Permissions, Privileges, and Access Controls
CVE-2018-5547
CWE-264 Low
No
No
7.1.7.1 17.08.2018 SB2018082011
#VU14176 - Exposure of sensitive information to an unauthorized actor
CVE-2018-5544
CWE-200 Low
No
No
- 01.08.2018 SB2018080210
#VU13524 - Improper input validation
CVE-2018-5528
CWE-20 Low
No
No
13.1.0.8 29.06.2018 SB2018062913
#VU13510 - Resource exhaustion
CVE-2018-5527
CWE-400 Low
No
No
13.1.0.8 28.06.2018 SB2018062913


Showing elements 121 - 140 out of 193