Known vulnerabilities in BIG-IP Edge Gateway
Vendor:
F5 Networks
Software:
BIG-IP Edge Gateway
Software CPE:
cpe:2.3:h:f5_networks:big-ip_edge_gateway:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
36
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
14.1.2.7
15.0.1.4
15.1.0.5
11.6.5.3
11.6.5.2
12.1.5.3
12.1.5.2
13.1.3.6
13.1.3.5
13.1.3.4
13.1.3.3
13.1.3.1
14.1.3.1
14.1.3
15.1.3
15.1.2
15.1.1
14.1.2.4
14.1.2.3
13.1.3.2
12.1.5.1
15.0.1.1
14.1.0.6
14.0.0.5
11.6.5.1
11.5.7
11.5.8
11.5.9
11.5.10
11.6.5
12.1.4
12.1.5
15.0.1
15.1.0
15.0.0
13.1.1.5
14.0.1
14.0.0
14.1.2
14.1.1
14.1.0
13.1.1
14.0.1.1
14.1.2.1
13.1.3
11.6.4
10.1.0
11.2.0
11.3.0
11.0.0
10.2.0
10.2.3
10.2.4
10.2.1
10.2.2
11.1.0
13.1.0.8
13.0.0 HF1
12.1.3.2
12.1.3.4
13.1.0.6
12.1.3.1
13.0.1
11.5.6
11.5.5
11.5.4 HF4
11.6.3
12.1.3
13.1.0.3
13.1.0.2
13.1.0.1
13.1.0
12.1.1
11.6.0
11.5.4
11.5.3
11.5.2
11.5.1
11.6.1
12.1.2
12.1.0
12.0.1
12.0.0
13.0.0
11.6.2
11.4.0
11.2.1
Vulnerabilities (36)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU27877 - Permissions, Privileges, and Access Controls CVE-2020-5892 |
CWE-264 | Low | - | 13.05.2020 |
SB2020051318 |
||
| #VU49042 - Missing release of memory after effective lifetime CVE-2020-5883 |
CWE-401 | Medium | 13.1.3.2, 14.0.1.1, 14.1.2.4, 15.0.1.1 | 30.04.2020 |
SB2020043038 |
||
| #VU26465 - Improper input validation CVE-2020-5857 |
CWE-20 | Medium | 12.1.5.1, 13.1.3.2, 14.1.2.3, 15.0.1.1, 15.1.0 | 30.03.2020 |
SB2020033010 |
||
| #VU26463 - Command injection CVE-2020-5858 |
CWE-77 | Low | 12.1.5.1, 14.1.2.3, 15.1.0 | 30.03.2020 |
SB2020033010 |
||
| #VU25007 - Improper input validation CVE-2020-5854 |
CWE-20 | Medium | 12.1.5.1, 13.1.3.2, 14.0.1.1, 14.1.2.1, 15.1.0 | 06.02.2020 |
SB2020020608 |
||
| #VU23102 - Resource exhaustion CVE-2019-6667 |
CWE-400 | Medium | 11.6.5.1, 12.1.5, 13.1.3, 14.0.0.5, 14.1.0.6, 15.0.1.1 | 29.11.2019 |
SB2019112909 |
||
| #VU22978 - Reliance on Reverse DNS Resolution for a Security-Critical Action CVE-2019-6663 |
CWE-350 | Low | - | 26.11.2019 |
SB2019112603 |
||
| #VU22977 - Permissions, Privileges, and Access Controls CVE-2019-6664 |
CWE-264 | Low | 14.1.2, 15.1.0 | 26.11.2019 |
SB2019112602 |
||
| #VU22850 - Information Exposure Through Log Files CVE-2019-6662 |
CWE-532 | Medium | 13.1.1.5 | 19.11.2019 |
SB2019111913 |
||
| #VU22832 - Resource exhaustion CVE-2019-6660 |
CWE-400 | Medium | 13.1.3, 14.0.1.1, 14.1.2.1 | 19.11.2019 |
SB2019111904 |
||
| #VU20891 - Permissions, Privileges, and Access Controls CVE-2019-6646 |
CWE-264 | Medium | 12.1.0 | 05.09.2019 |
SB2019080825 |
||
| #VU20858 - Out-of-bounds write CVE-2017-18551 |
CWE-787 | Low | 11.6.5.3, 12.1.5.3, 13.1.3.6, 14.1.3.1, 15.1.3 | 04.09.2019 |
SB2019081914 SB2020121806 SB2020122317 and 9 more |
||
| #VU31134 - Improper input validation CVE-2019-6605 |
CWE-20 | Medium | 12.1.0 | 28.03.2019 |
SB2019032828 |
||
| #VU13524 - Improper input validation CVE-2018-5528 |
CWE-20 | Low | 13.1.0.8 | 29.06.2018 |
SB2018062913 |
||
| #VU13510 - Resource exhaustion CVE-2018-5527 |
CWE-400 | Low | 13.1.0.8 | 28.06.2018 |
SB2018062913 |
||
| #VU12849 - Improper Restriction of Excessive Authentication Attempts CVE-2018-5506 |
CWE-307 | Low | - | 18.05.2018 |
SB2018051735 |
||
| #VU12846 - Command injection CVE-2018-5511 |
CWE-77 | Low | - | 18.05.2018 |
SB2018051735 |
||
| #VU12843 - Data Handling CVE-2017-6158 |
CWE-19 | Medium | - | 18.05.2018 |
SB2018051735 |
||
| #VU12774 - Improper input validation CVE-2017-6156 |
CWE-20 | Medium | - | 16.05.2018 |
SB2018051735 |
||
| #VU12295 - Improper Resource Shutdown or Release CVE-2018-5510 |
CWE-404 | Medium | - | 30.04.2018 |
SB2018050209 |
Showing elements 1 - 20 out of 36