Known vulnerabilities in BIG-IP ASM - page 3
Vendor:
F5 Networks
Software:
BIG-IP ASM
Software CPE:
cpe:2.3:h:f5_networks:big-ip_asm:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
171
Public exploits:
14
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
12.1.3.3
13.1.3.3
13.1.1.4
13.1.1.3
13.1.1.2
13.1.1.1
13.1.0.7
13.1.0.5
14.1.2.2
15.1.0.3
17.5.0
17.1.1
17.1.0
15.1.10.7
15.1.10.5
15.1.10.4
15.1.10.3
15.1.10.2
15.1.10.1
15.1.10.0
17.5.1
15.1.10.8
17.1.3
15.1.10.6.0.11.6
16.1.5
17.1.2
12.1.4.1
14.1.4.2
17.0.0.1
16.1.3.2
16.1.3.1
16.1.3
14.1.5.2
14.1.5.1
14.1.5
14.1.5.3
15.1.8
16.1.3.3
17.0.0.2
17.0.0
14.1.4.5
15.1.4.1
16.1.2
14.1.4.4
15.1.4
16.1.1
14.1.4.1
12.1.6
16.1.0
13.1.4.1
14.1.4.3
15.1.3.1
16.0.1.2
13.1.4
15.1.3
11.6.5.3
12.1.5.3
14.1.4
13.1.3.6
15.1.2.1
16.0.1.1
14.1.3.1
14.1.2.8
13.1.3.5
14.1.3
16.0.1
15.1.2
15.1.1
13.0.0 HF3
12.1.2 HF2
11.6.2 HF1
15.1.0.5
14.1.2.7
16.0.0
14.1.2-0.89.37
14.1.2.5
15.0.1.4
15.1.0.4
14.1.2.6
13.1.3.4
12.1.5.2
11.6.5.2
15.0.1.3
14.1.2.4
15.0.1.2
15.1.0.2
15.1.0.1
12.1.5.1
14.1.2.3
14.1.0.6
14.0.0.5
11.6.5.1
13.1.3.1
15.0.1.1
13.1.3.2
11.5.7
11.5.8
11.5.9
11.5.10
11.6.5
12.1.4
12.1.5
15.0.1
15.1.0
15.0.0
14.1.2.1.0.122.4-ENG Hotfix
14.1.2.1.0.115.4-ENG Hotfix
14.1.2.1.0.111.4-ENG Hotfix
14.1.2.1.0.105.4-ENG Hotfix
14.1.2.1.0.99.4-ENG Hotfix
14.1.2.1.0.97.4-ENG Hotfix
14.1.2.1.0.34.4-ENG Hotfix
14.1.2.1.0.16.4-ENG Hotfix
14.1.2.1.0.14.4-ENG Hotfix
14.1.2.1.0.46.4-ENG Hotfix
14.1.2.0.32.37-ENG Hotfix
14.1.2.0.18.37-ENG Hotfix
14.1.2.0.11.37-ENG Hotfix
14.1.0.6.0.70.9-ENG Hotfix
14.1.0.6.0.68.9-ENG Hotfix
14.1.0.6.0.14.9-ENG Hotfix
14.1.0.6.0.11.9-ENG Hotfix
14.1.0.5.0.40.5-ENG Hotfix
14.1.0.5.0.36.5-ENG Hotfix
14.1.0.5.0.15.5-ENG Hotfix
14.1.0.3.0.99.6-ENG Hotfix
14.1.0.3.0.97.6-ENG Hotfix
14.1.0.3.0.79.6-ENG Hotfix
15.0.1.0.48.11-ENG Hotfix
15.0.1.0.33.11-ENG Hotfix
13.1.1.5
14.0.1
14.0.0
14.1.2
14.1.1
14.1.0
13.1.1
14.0.1.1
14.1.2.1
13.1.3
11.6.4
13.1.0.8
13.0.0 HF1
12.1.3.2
12.1.3.4
13.1.0.6
12.1.3.1
13.0.1
11.5.6
11.5.5
11.5.4 HF4
11.6.3
12.1.3
13.1.0.4
13.1.0.3
13.1.0.2
13.1.0.1
13.1.0
11.5.3
11.5.2
11.5.1
11.5.0
11.6.2
11.4.0
11.2.1
11.5.4
11.5.1 HF6
11.6.0
12.0.1
12.1.2 HF1
13.0.0
12.1.0 HF1
12.0.0 HF4
12.0.0 HF3
12.0.0 HF1
12.1.2
12.0.0
11.6.1 HF1
12.1.1
12.1.0
11.6.1
Vulnerabilities (171)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU50620 - Resource exhaustion CVE-2021-22976 |
CWE-400 | Medium | 13.1.3.6, 14.1.3.1, 15.1.2, 16.0.1.1 | 11.02.2021 |
SB2021021117 |
||
| #VU50619 - Security Features |
CWE-254 | Medium | 13.1.3.6, 14.1.2.8, 15.1.2, 16.0.1.1 | 11.02.2021 |
SB2021021116 |
||
| #VU50612 - Resource exhaustion CVE-2021-22975 |
CWE-400 | Medium | 14.1.3.1, 15.1.2.1, 16.0.1.1 | 11.02.2021 |
SB2021021108 |
||
| #VU50610 - Out-of-bounds write CVE-2021-22973 |
CWE-787 | Medium | 13.1.3.5, 14.1.3.1, 15.1.2, 16.0.1.1 | 11.02.2021 |
SB2021021107 |
||
| #VU50609 - Cryptographic Issues CVE-2021-22981 |
CWE-310 | Low | - | 11.02.2021 |
SB2021021106 |
||
| #VU50608 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-22979 |
CWE-79 | Medium | 13.1.3.5, 14.1.2.8, 15.1.1, 16.0.1 | 11.02.2021 |
SB2021021105 |
||
| #VU49084 - Improper input validation CVE-2020-27728 |
CWE-20 | Medium | 14.1.3.1, 15.1.1, 16.0.1 | 17.12.2020 |
SB2020121738 |
||
| #VU49082 - Resource exhaustion CVE-2020-27718 |
CWE-400 | Medium | 13.1.3.5, 14.1.3.1, 15.1.1, 16.0.1 | 17.12.2020 |
SB2020121736 |
||
| #VU49080 - Improper input validation CVE-2020-27727 |
CWE-20 | Low | 13.1.3.5, 14.1.3.1, 15.1.1, 16.0.1.1 | 17.12.2020 |
SB2020121734 |
||
| #VU49078 - Resource exhaustion CVE-2020-27715 |
CWE-400 | Medium | 14.1.3.1, 15.1.1 | 17.12.2020 |
SB2020121731 |
||
| #VU49067 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-27719 |
CWE-79 | Low | 14.1.3.1, 15.1.1, 16.0.1 | 17.12.2020 |
SB2020121723 |
||
| #VU48896 - NULL Pointer Dereference CVE-2020-1971 |
CWE-476 | Medium | - | 08.12.2020 |
SB2020120852 SB2020120903 SB2020120905 and 91 more |
||
| #VU49150 - Use of Insufficiently Random Values CVE-2020-25705 |
CWE-330 | Medium | - | 17.11.2020 |
SB2020111734 SB2020122413 SB2021031802 and 24 more |
||
| #VU46573 - Exposure of sensitive information to an unauthorized actor CVE-2020-1968 |
CWE-200 | Medium | - | 10.09.2020 |
SB2020091011 SB2020121720 SB2021012078 and 22 more |
||
| #VU50427 - Out-of-bounds read CVE-2020-10769 |
CWE-125 | Low | - | 26.06.2020 |
SB2020062625 SB2021020901 SB2022061630 and 8 more |
||
| #VU21059 - Heap-based Buffer Overflow CVE-2019-5482 |
CWE-122 | Medium | 13.1.4.1, 14.1.4.2, 15.1.4, 16.0.1.2, 16.1.0 | 11.09.2019 |
SB2019091142 SB2019091143 SB2019091201 and 28 more |
||
| #VU13023 - Use After Free CVE-2018-10675 |
CWE-416 | Low | - | 28.05.2018 |
SB2017082507 SB2018111335 SB2018111336 and 11 more |
||
| #VU12992 - Buffer overflow CVE-2018-1126 |
CWE-120 | High | - | 23.05.2018 |
SB2018052212 SB2018052312 SB2018052315 and 20 more |
||
| #VU12977 - Integer overflow CVE-2018-1124 |
CWE-190 | Low | - | 22.05.2018 |
SB2018052212 SB2018052312 SB2018052315 and 23 more |
||
| #VU12975 - Permissions, Privileges, and Access Controls CVE-2018-1122 |
CWE-264 | Low | - | 22.05.2018 |
SB2018052212 SB2018052312 SB2018052315 and 17 more |
Showing elements 41 - 60 out of 171