Known vulnerabilities in BIG-IP FPS 13.1.1 - page 3
Vendor:
F5 Networks
Software:
BIG-IP FPS
Version:
13.1.1
Software CPE:
cpe:2.3:h:f5_networks:big-ip_fps:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
63
Public exploits:
12
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Vulnerabilities by Severity
13.1.3.3
13.1.3.1
13.1.1.4
13.1.1.3
13.1.1.2
13.1.1.1
14.1.2.2
15.1.0.3
14.1.4.2
14.1.4.4
15.1.4
16.1.1
12.1.6
13.1.4
16.1.0
13.1.4.1
14.1.4.3
15.1.3.1
16.0.1.2
15.1.3
11.6.5.3
12.1.5.3
14.1.4
13.1.3.6
15.1.2.1
16.0.1.1
14.1.3.1
13.1.3.5
14.1.3
15.1.2
16.0.1
15.1.1
14.1.2.8
12.1.2 HF1
13.0.0 HF3
12.1.2 HF2
11.6.2 HF1
15.1.0.5
14.1.2.7
16.0.0
14.1.2-0.89.37
14.1.2.5
15.0.1.4
15.1.0.4
14.1.2.6
13.1.3.4
12.1.5.2
11.6.5.2
15.0.1.3
14.1.2.4
15.0.1.2
15.1.0.2
15.1.0.1
14.1.2.3
13.1.3.2
12.1.5.1
11.5.1
15.0.1.1
14.1.0.6
14.0.0.5
11.6.5.1
11.5.7
11.5.8
11.5.9
11.5.10
11.6.5
12.1.1
12.1.2
12.1.3
12.1.4
12.1.5
15.1.0
14.1.2.1.0.122.4-ENG Hotfix
14.1.2.1.0.115.4-ENG Hotfix
14.1.2.1.0.111.4-ENG Hotfix
14.1.2.1.0.105.4-ENG Hotfix
14.1.2.1.0.99.4-ENG Hotfix
14.1.2.1.0.97.4-ENG Hotfix
14.1.2.1.0.34.4-ENG Hotfix
14.1.2.1.0.16.4-ENG Hotfix
14.1.2.1.0.14.4-ENG Hotfix
14.1.2.1.0.46.4-ENG Hotfix
14.1.2.0.32.37-ENG Hotfix
14.1.2.0.18.37-ENG Hotfix
14.1.2.0.11.37-ENG Hotfix
14.1.0.6.0.70.9-ENG Hotfix
14.1.0.6.0.68.9-ENG Hotfix
14.1.0.6.0.14.9-ENG Hotfix
14.1.0.6.0.11.9-ENG Hotfix
14.1.0.5.0.40.5-ENG Hotfix
14.1.0.5.0.36.5-ENG Hotfix
14.1.0.5.0.15.5-ENG Hotfix
14.1.0.3.0.99.6-ENG Hotfix
14.1.0.3.0.97.6-ENG Hotfix
14.1.0.3.0.79.6-ENG Hotfix
15.0.1.0.48.11-ENG Hotfix
15.0.1.0.33.11-ENG Hotfix
13.1.1.5
14.1.1
14.0.1.1
14.1.2.1
12.1.0
11.5.2
11.5.3
11.5.4
11.5.5
11.5.6
11.6.0
11.6.1
11.6.2
11.6.3
11.6.4
12.0.0
15.0.1
15.0.0
14.1.2
14.1.0
14.0.1
14.0.0
13.1.3
13.1.1
13.1.0
13.0.1
13.0.0
Vulnerabilities (63)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU46077 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-5917 |
CWE-300 | Medium | 12.1.5.2, 14.1.2.4, 15.0.1.4, 15.1.0.5, 16.0.0 | 26.08.2020 |
SB2020082611 |
||
| #VU46075 - Improper input validation CVE-2020-5925 |
CWE-20 | Medium | 11.6.5.2, 12.1.5.2, 13.1.3.4, 14.1.2.7, 15.0.1.4, 15.1.0.5, 16.0.0 | 26.08.2020 |
SB2020082609 |
||
| #VU46071 - Improper Certificate Validation CVE-2020-5913 |
CWE-295 | Medium | 12.1.5.2, 14.1.2-0.89.37, 14.1.2.5, 15.1.0.2, 16.0.0 | 26.08.2020 |
SB2020082607 |
||
| #VU31791 - Permissions, Privileges, and Access Controls CVE-2020-5907 |
CWE-264 | Low | 11.6.5.2, 12.1.5.2, 13.1.3.4, 14.1.2.4, 15.0.1.4, 15.1.0.4 | 23.07.2020 |
SB2020070133 |
||
| #VU31790 - Incorrect Default Permissions CVE-2020-5906 |
CWE-276 | Medium | 12.1.5.2, 13.1.3.4 | 23.07.2020 |
SB2020070134 |
||
| #VU31789 - Cross-Site Request Forgery (CSRF) CVE-2020-5904 |
CWE-352 | Low | 12.1.5.2, 13.1.3.4, 14.1.2.6, 15.0.1.4, 15.1.0.4 | 23.07.2020 |
SB2020070134 |
||
| #VU31788 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-5903 |
CWE-79 | Low | 12.1.5.2, 13.1.3.4, 14.1.2.6, 15.0.1.4, 15.1.0.4 | 23.07.2020 |
SB2020070134 |
||
| #VU29442 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-5902 |
CWE-78 | High | 11.6.5.2, 12.1.5.2, 13.1.3.4, 14.1.2.6, 15.1.0.4 | 01.07.2020 |
SB2020070120 |
||
| #VU27561 - Improper input validation CVE-2020-5872 |
CWE-20 | Medium | 12.1.5, 13.1.3.2, 14.0.1.1, 14.1.2.4, 15.0.0 | 06.05.2020 |
SB2020050613 |
||
| #VU27520 - Missing Encryption of Sensitive Data CVE-2020-5886 |
CWE-311 | Medium | 14.1.2.4, 15.1.0.2 | 05.05.2020 |
SB2020050509 |
||
| #VU27518 - Security Features CVE-2020-5884 |
CWE-254 | Medium | 16.0.0 | 05.05.2020 |
SB2020050507 |
||
| #VU49042 - Missing release of memory after effective lifetime CVE-2020-5883 |
CWE-401 | Medium | 13.1.3.2, 14.0.1.1, 14.1.2.4, 15.0.1.1 | 30.04.2020 |
SB2020043038 |
||
| #VU27395 - Authentication Bypass by Spoofing CVE-2020-11868 |
CWE-290 | Low | - | 28.04.2020 |
SB2020042822 SB2020070701 SB2020071906 and 7 more |
||
| #VU26465 - Improper input validation CVE-2020-5857 |
CWE-20 | Medium | 12.1.5.1, 13.1.3.2, 14.1.2.3, 15.0.1.1, 15.1.0 | 30.03.2020 |
SB2020033010 |
||
| #VU26463 - Command injection CVE-2020-5858 |
CWE-77 | Low | 12.1.5.1, 14.1.2.3, 15.1.0 | 30.03.2020 |
SB2020033010 |
||
| #VU26459 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-5860 |
CWE-300 | Medium | - | 30.03.2020 |
SB2020033008 |
||
| #VU25007 - Improper input validation CVE-2020-5854 |
CWE-20 | Medium | 12.1.5.1, 13.1.3.2, 14.0.1.1, 14.1.2.1, 15.1.0 | 06.02.2020 |
SB2020020608 |
||
| #VU23102 - Resource exhaustion CVE-2019-6667 |
CWE-400 | Medium | 11.6.5.1, 12.1.5, 13.1.3, 14.0.0.5, 14.1.0.6, 15.0.1.1 | 29.11.2019 |
SB2019112909 |
||
| #VU22978 - Reliance on Reverse DNS Resolution for a Security-Critical Action CVE-2019-6663 |
CWE-350 | Low | - | 26.11.2019 |
SB2019112603 |
||
| #VU18254 - Out-of-bounds write CVE-2019-3863 |
CWE-787 | Medium | - | 15.04.2019 |
SB2019031904 SB2019041501 SB2019032002 and 20 more |
Showing elements 41 - 60 out of 63