Known vulnerabilities in BIG-IP ASM - page 4
Vendor:
F5 Networks
Software:
BIG-IP ASM
Software CPE:
cpe:2.3:h:f5_networks:big-ip_asm:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
171
Public exploits:
14
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
12.1.3.3
13.1.3.3
13.1.1.4
13.1.1.3
13.1.1.2
13.1.1.1
13.1.0.7
13.1.0.5
14.1.2.2
15.1.0.3
17.5.0
17.1.1
17.1.0
15.1.10.7
15.1.10.5
15.1.10.4
15.1.10.3
15.1.10.2
15.1.10.1
15.1.10.0
17.5.1
15.1.10.8
17.1.3
15.1.10.6.0.11.6
16.1.5
17.1.2
12.1.4.1
14.1.4.2
17.0.0.1
16.1.3.2
16.1.3.1
16.1.3
14.1.5.2
14.1.5.1
14.1.5
14.1.5.3
15.1.8
16.1.3.3
17.0.0.2
17.0.0
14.1.4.5
15.1.4.1
16.1.2
14.1.4.4
15.1.4
16.1.1
14.1.4.1
12.1.6
16.1.0
13.1.4.1
14.1.4.3
15.1.3.1
16.0.1.2
13.1.4
15.1.3
11.6.5.3
12.1.5.3
14.1.4
13.1.3.6
15.1.2.1
16.0.1.1
14.1.3.1
14.1.2.8
13.1.3.5
14.1.3
16.0.1
15.1.2
15.1.1
13.0.0 HF3
12.1.2 HF2
11.6.2 HF1
15.1.0.5
14.1.2.7
16.0.0
14.1.2-0.89.37
14.1.2.5
15.0.1.4
15.1.0.4
14.1.2.6
13.1.3.4
12.1.5.2
11.6.5.2
15.0.1.3
14.1.2.4
15.0.1.2
15.1.0.2
15.1.0.1
12.1.5.1
14.1.2.3
14.1.0.6
14.0.0.5
11.6.5.1
13.1.3.1
15.0.1.1
13.1.3.2
11.5.7
11.5.8
11.5.9
11.5.10
11.6.5
12.1.4
12.1.5
15.0.1
15.1.0
15.0.0
14.1.2.1.0.122.4-ENG Hotfix
14.1.2.1.0.115.4-ENG Hotfix
14.1.2.1.0.111.4-ENG Hotfix
14.1.2.1.0.105.4-ENG Hotfix
14.1.2.1.0.99.4-ENG Hotfix
14.1.2.1.0.97.4-ENG Hotfix
14.1.2.1.0.34.4-ENG Hotfix
14.1.2.1.0.16.4-ENG Hotfix
14.1.2.1.0.14.4-ENG Hotfix
14.1.2.1.0.46.4-ENG Hotfix
14.1.2.0.32.37-ENG Hotfix
14.1.2.0.18.37-ENG Hotfix
14.1.2.0.11.37-ENG Hotfix
14.1.0.6.0.70.9-ENG Hotfix
14.1.0.6.0.68.9-ENG Hotfix
14.1.0.6.0.14.9-ENG Hotfix
14.1.0.6.0.11.9-ENG Hotfix
14.1.0.5.0.40.5-ENG Hotfix
14.1.0.5.0.36.5-ENG Hotfix
14.1.0.5.0.15.5-ENG Hotfix
14.1.0.3.0.99.6-ENG Hotfix
14.1.0.3.0.97.6-ENG Hotfix
14.1.0.3.0.79.6-ENG Hotfix
15.0.1.0.48.11-ENG Hotfix
15.0.1.0.33.11-ENG Hotfix
13.1.1.5
14.0.1
14.0.0
14.1.2
14.1.1
14.1.0
13.1.1
14.0.1.1
14.1.2.1
13.1.3
11.6.4
13.1.0.8
13.0.0 HF1
12.1.3.2
12.1.3.4
13.1.0.6
12.1.3.1
13.0.1
11.5.6
11.5.5
11.5.4 HF4
11.6.3
12.1.3
13.1.0.4
13.1.0.3
13.1.0.2
13.1.0.1
13.1.0
11.5.3
11.5.2
11.5.1
11.5.0
11.6.2
11.4.0
11.2.1
11.5.4
11.5.1 HF6
11.6.0
12.0.1
12.1.2 HF1
13.0.0
12.1.0 HF1
12.0.0 HF4
12.0.0 HF3
12.0.0 HF1
12.1.2
12.0.0
11.6.1 HF1
12.1.1
12.1.0
11.6.1
Vulnerabilities (171)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU49056 - Improper input validation CVE-2020-5949 |
CWE-20 | Medium | 13.1.3.5, 14.1.0 | 11.12.2020 |
SB2020121717 |
||
| #VU49057 - Missing release of memory after effective lifetime CVE-2020-27713 |
CWE-401 | Medium | 13.1.3.5 | 11.12.2020 |
SB2020121718 |
||
| #VU49058 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-5948 |
CWE-79 | Medium | 13.1.3.5, 14.1.2.8, 15.1.1, 16.0.1 | 11.12.2020 |
SB2020121719 |
||
| #VU48761 - Reachable Assertion CVE-2020-27617 |
CWE-617 | Medium | - | 06.11.2020 |
SB2020120221 SB2020121714 |
||
| #VU46790 - Use After Free CVE-2020-25084 |
CWE-416 | Medium | - | 17.09.2020 |
SB2020091720 SB2020121711 |
||
| #VU46575 - Cryptographic Issues CVE-2020-5929 |
CWE-310 | Medium | 11.6.2 HF1, 11.6.3, 12.1.2 HF2, 12.1.3, 13.0.0 HF3, 13.1.0, 14.0.0 | 10.09.2020 |
SB2020091016 |
||
| #VU46124 - Exposure of sensitive information to an unauthorized actor CVE-2020-5916 |
CWE-200 | Low | 15.0.1.4, 15.1.0.5, 16.0.0 | 28.08.2020 |
SB2020082812 |
||
| #VU46122 - Improper input validation CVE-2020-5914 |
CWE-20 | Medium | 11.6.5.2, 12.1.5.2, 13.1.3.4, 14.1.2.5, 15.0.1.4, 15.1.0.5, 16.0.0 | 28.08.2020 |
SB2020082810 |
||
| #VU46121 - Cross-Site Request Forgery (CSRF) CVE-2020-5928 |
CWE-352 | Low | 12.1.5.2, 14.1.2.7, 15.0.1.4, 15.1.0.5, 16.0.0 | 28.08.2020 |
SB2020082809 |
||
| #VU46077 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-5917 |
CWE-300 | Medium | 12.1.5.2, 14.1.2.4, 15.0.1.4, 15.1.0.5, 16.0.0 | 26.08.2020 |
SB2020082611 |
||
| #VU46074 - Missing release of memory after effective lifetime CVE-2020-5926 |
CWE-401 | Medium | 14.1.2.7, 15.0.1.4, 15.1.0.5, 16.0.0 | 26.08.2020 |
SB2020082609 |
||
| #VU45985 - Out-of-bounds write CVE-2020-14364 |
CWE-787 | Medium | - | 24.08.2020 |
SB2020082410 SB2020090715 SB2020091121 and 35 more |
||
| #VU29535 - Double Free CVE-2019-20892 |
CWE-415 | Medium | - | 06.07.2020 |
SB2020070606 SB2020070607 SB2020082704 and 3 more |
||
| #VU18254 - Out-of-bounds write CVE-2019-3863 |
CWE-787 | Medium | - | 15.04.2019 |
SB2019031904 SB2019041501 SB2019032002 and 20 more |
||
| #VU18025 - Integer overflow CVE-2019-3857 |
CWE-190 | Medium | - | 19.03.2019 |
SB2019031904 SB2019041501 SB2019032002 and 20 more |
||
| #VU18023 - Integer overflow CVE-2019-3856 |
CWE-190 | Medium | - | 19.03.2019 |
SB2019031904 SB2019041501 SB2019032002 and 20 more |
||
| #VU16558 - Permissions, Privileges, and Access Controls CVE-2018-18397 |
CWE-264 | Low | - | 14.12.2018 |
SB2018120502 SB2019030501 SB2019042310 and 5 more |
||
| #VU14184 - Out-of-bounds read CVE-2017-18344 |
CWE-125 | Low | - | 02.08.2018 |
SB2017122701 SB2018080803 SB2018111335 and 7 more |
||
| #VU12853 - Improper input validation CVE-2018-1120 |
CWE-20 | Low | - | 20.05.2018 |
SB2018052205 SB2018052212 SB2018053102 and 12 more |
||
| #VU9693 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2017-10661 |
CWE-362 | Low | - | 19.12.2017 |
SB2017121510 SB2017103108 SB2017121511 and 35 more |
Showing elements 61 - 80 out of 171