Known vulnerabilities in BIG-IP WebAccelerator
Vendor:
F5 Networks
Software:
BIG-IP WebAccelerator
Software CPE:
cpe:2.3:h:f5_networks:big-ip_webaccelerator:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
35
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
14.1.2.7
15.0.1.4
15.1.0.5
11.6.5.3
11.6.5.2
12.1.5.3
12.1.5.2
13.1.3.6
13.1.3.5
13.1.3.4
13.1.3.3
13.1.3.1
15.1.3
15.1.2
15.1.1
14.1.3.1
14.1.3
14.1.2.4
14.1.2.3
13.1.3.2
12.1.5.1
15.0.1.1
14.1.0.6
14.0.0.5
11.6.5.1
11.5.7
11.5.8
11.5.9
11.5.10
11.6.5
12.1.4
12.1.5
15.0.1
15.1.0
15.0.0
13.1.1.5
14.0.1
14.0.0
14.1.2
14.1.1
14.1.0
13.1.1
13.1.3
14.0.1.1
14.1.2.1
11.6.4
11.2.0
10.1.0
11.1.0
10.2.2
10.2.1
10.2.0
11.0.0
10.2.3
10.2.4
11.3.0
10.0.1
10.0.0
13.1.0.8
13.0.0 HF1
12.1.3.2
12.1.3.4
13.1.0.6
12.1.3.1
13.0.1
11.5.6
11.5.5
11.5.4 HF4
11.6.3
12.1.3
13.1.0.3
13.1.0.2
13.1.0.1
13.1.0
11.6.0
11.5.4
11.5.3
11.5.2
11.5.1
11.6.1
12.1.2
12.1.1
12.1.0
12.0.1
12.0.0
13.0.0
11.6.2
11.4.0
11.2.1
Vulnerabilities (35)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU49042 - Missing release of memory after effective lifetime CVE-2020-5883 |
CWE-401 | Medium | 13.1.3.2, 14.0.1.1, 14.1.2.4, 15.0.1.1 | 30.04.2020 |
SB2020043038 |
||
| #VU26465 - Improper input validation CVE-2020-5857 |
CWE-20 | Medium | 12.1.5.1, 13.1.3.2, 14.1.2.3, 15.0.1.1, 15.1.0 | 30.03.2020 |
SB2020033010 |
||
| #VU26463 - Command injection CVE-2020-5858 |
CWE-77 | Low | 12.1.5.1, 14.1.2.3, 15.1.0 | 30.03.2020 |
SB2020033010 |
||
| #VU25007 - Improper input validation CVE-2020-5854 |
CWE-20 | Medium | 12.1.5.1, 13.1.3.2, 14.0.1.1, 14.1.2.1, 15.1.0 | 06.02.2020 |
SB2020020608 |
||
| #VU23102 - Resource exhaustion CVE-2019-6667 |
CWE-400 | Medium | 11.6.5.1, 12.1.5, 13.1.3, 14.0.0.5, 14.1.0.6, 15.0.1.1 | 29.11.2019 |
SB2019112909 |
||
| #VU22978 - Reliance on Reverse DNS Resolution for a Security-Critical Action CVE-2019-6663 |
CWE-350 | Low | - | 26.11.2019 |
SB2019112603 |
||
| #VU22977 - Permissions, Privileges, and Access Controls CVE-2019-6664 |
CWE-264 | Low | 14.1.2, 15.1.0 | 26.11.2019 |
SB2019112602 |
||
| #VU22850 - Information Exposure Through Log Files CVE-2019-6662 |
CWE-532 | Medium | 13.1.1.5 | 19.11.2019 |
SB2019111913 |
||
| #VU22832 - Resource exhaustion CVE-2019-6660 |
CWE-400 | Medium | 13.1.3, 14.0.1.1, 14.1.2.1 | 19.11.2019 |
SB2019111904 |
||
| #VU20891 - Permissions, Privileges, and Access Controls CVE-2019-6646 |
CWE-264 | Medium | 12.1.0 | 05.09.2019 |
SB2019080825 |
||
| #VU20858 - Out-of-bounds write CVE-2017-18551 |
CWE-787 | Low | 11.6.5.3, 12.1.5.3, 13.1.3.6, 14.1.3.1, 15.1.3 | 04.09.2019 |
SB2019081914 SB2020121806 SB2020122317 and 9 more |
||
| #VU13524 - Improper input validation CVE-2018-5528 |
CWE-20 | Low | 13.1.0.8 | 29.06.2018 |
SB2018062913 |
||
| #VU13510 - Resource exhaustion CVE-2018-5527 |
CWE-400 | Low | 13.1.0.8 | 28.06.2018 |
SB2018062913 |
||
| #VU12849 - Improper Restriction of Excessive Authentication Attempts CVE-2018-5506 |
CWE-307 | Low | - | 18.05.2018 |
SB2018051735 |
||
| #VU12846 - Command injection CVE-2018-5511 |
CWE-77 | Low | - | 18.05.2018 |
SB2018051735 |
||
| #VU12843 - Data Handling CVE-2017-6158 |
CWE-19 | Medium | - | 18.05.2018 |
SB2018051735 |
||
| #VU12774 - Improper input validation CVE-2017-6156 |
CWE-20 | Medium | - | 16.05.2018 |
SB2018051735 |
||
| #VU12336 - Improper Resource Shutdown or Release CVE-2018-5517 |
CWE-404 | Medium | - | 02.05.2018 |
SB2018050209 |
||
| #VU12335 - Improper Resource Shutdown or Release CVE-2018-5514 |
CWE-404 | Medium | - | 02.05.2018 |
SB2018050209 |
||
| #VU12331 - Improper Access Control CVE-2018-5518 |
CWE-284 | Low | - | 02.05.2018 |
SB2018050209 |
Showing elements 1 - 20 out of 35