Known vulnerabilities in BIG-IP PEM 12.1.2 - page 4

Software: BIG-IP PEM
Version: 12.1.2
Software CPE: cpe:2.3:h:f5_networks:big-ip_pem:*:*:*:*:*:*:*:*
Total vulnerabilities: 97
Public exploits: 12
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BIG-IP PEM version 12.1.2 BIG-IP PEM 12.1.2 is affected by 97 vulnerabilities: 9 high, 38 medium, 50 low Critical High Medium Low

Vulnerabilities (97)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12849 - Improper Restriction of Excessive Authentication Attempts
CVE-2018-5506
CWE-307 Low
No
No
- 18.05.2018 SB2018051735
#VU12844 - Data Handling
CVE-2018-5508
CWE-19 Medium
No
No
- 18.05.2018 SB2018051735
#VU12843 - Data Handling
CVE-2017-6158
CWE-19 Medium
No
No
- 18.05.2018 SB2018051735
#VU12333 - Exposure of sensitive information to an unauthorized actor
CVE-2018-5516
CWE-200 Low
No
No
- 02.05.2018 SB2018050209
#VU12332 - Exposure of sensitive information to an unauthorized actor
CVE-2018-5520
CWE-200 Low
No
No
- 02.05.2018 SB2018050209
#VU12331 - Improper Access Control
CVE-2018-5518
CWE-284 Low
No
No
- 02.05.2018 SB2018050209
#VU12330 - Improper Access Control
CVE-2018-5519
CWE-284 Low
No
No
- 02.05.2018 SB2018050209
#VU12319 - Improper Resource Shutdown or Release
CVE-2017-6155
CWE-404 Medium
No
No
- 01.05.2018 SB2018050209
#VU11392 - Missing release of memory after effective lifetime
CVE-2018-5500
CWE-401 Low
No
No
- 30.03.2018 SB2018030115
#VU11390 - Resource exhaustion
CVE-2018-5501
CWE-400 Low
No
No
- 30.03.2018 SB2018030115
#VU11389 - Improper input validation
CVE-2017-6150
CWE-20 Low
No
No
- 30.03.2018 SB2018030115
#VU11256 - Improper input validation
CVE-2018-5504
CWE-20 High
No
No
- 23.03.2018 SB2018032310
#VU11255 - Improper input validation
CVE-2018-5509
CWE-20 Low
No
No
- 23.03.2018 SB2018032310
#VU11253 - Improper Resource Shutdown or Release
CVE-2018-5503
CWE-404 Low
No
No
- 23.03.2018 SB2018032310
#VU10393 - Improper input validation
CVE-2017-6169
CWE-20 Low
No
No
- 07.02.2018 SB2018020705
#VU9747 - Improper input validation
CVE-2017-6164
CWE-20 Low
No
No
- 25.12.2017 SB2017122002
#VU9746 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2017-6167
CWE-362 Low
No
No
- 25.12.2017 SB2017122002
#VU9743 - Improper input validation
CVE-2017-6138
CWE-20 Low
No
No
- 25.12.2017 SB2017122002
#VU9741 - Improper input validation
CVE-2017-6132
CWE-20 Low
No
No
- 25.12.2017 SB2017122002
#VU9739 - Improper input validation
CVE-2017-6133
CWE-20 Low
No
No
- 25.12.2017 SB2017122002


Showing elements 61 - 80 out of 97