Known vulnerabilities in F5OS - page 3

Vendor: F5 Networks
Software: F5OS
Software CPE: cpe:2.3:o:f5_networks:f5os:*:*:*:*:*:*:*:*
Website: https://f5.com/
Total vulnerabilities: 114
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting F5OS F5OS is affected by 114 known vulnerabilities: 6 high, 35 medium, 73 low Critical High Medium Low

Vulnerabilities (114)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93544 - Improper input validation
CVE-2024-38477		 CWE-20 Medium
No
No
 - 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 58 more
#VU88671 - Improper input validation
CVE-2024-21005		 CWE-20 Low
No
No
 - 17.04.2024 SB2024041764
SB2024041765
SB2024050635
and 10 more
#VU86577 - Use After Free
CVE-2024-1086		 CWE-416 High
Available
Exploited
 - 19.02.2024 SB2024021923
SB2024021925
SB2024021926
and 116 more
#VU76651 - Resource Management Errors
CVE-2023-2650		 CWE-399 Medium
No
No
 - 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU75931 - Exposure of resource to wrong sphere
CVE-2022-38087		 CWE-668 Low
No
No
 - 09.05.2023 SB20230509118
SB2023051147
SB2023051149
and 10 more
#VU72477 - Incorrect Calculation
CVE-2022-33972		 CWE-682 Low
No
No
 1.5.0 21.02.2023 SB2023022189
SB2023022190
SB2023022707
and 21 more
#VU71826 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-22657		 CWE-78 Medium
No
No
 1.5.0 06.02.2023 SB2023020650
#VU71754 - Integer overflow
CVE-2022-25147		 CWE-190 High
No
No
 1.5.0, 1.6.0 02.02.2023 SB2023020210
SB2023020212
SB2023020942
and 47 more
#VU69392 - Resource exhaustion
CVE-2022-45061		 CWE-400 Medium
No
No
 - 16.11.2022 SB2022111650
SB2022112824
SB2022112856
and 125 more
#VU67550 - Missing release of memory after effective lifetime
CVE-2022-38178		 CWE-401 Medium
No
No
 1.6.0 21.09.2022 SB2022092131
SB2022092140
SB2022092147
and 48 more
#VU66499 - Out-of-bounds write
CVE-2021-33060		 CWE-787 Low
No
No
 - 15.08.2022 SB2022081531
SB2022090831
SB2023031517
and 6 more
#VU65220 - Processor optimization removal or modification of security-critical code
CVE-2022-29901		 CWE-1037 Low
No
No
 - 12.07.2022 SB2022071265
SB2022071302
SB2022071346
and 75 more
#VU65205 - Processor optimization removal or modification of security-critical code
CVE-2022-29900		 CWE-1037 Low
No
No
 - 12.07.2022 SB2022071249
SB2022071346
SB2022071602
and 76 more
#VU64089 - Improper Authentication
CVE-2022-31813		 CWE-287 Medium
No
No
 1.3.2 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU64083 - Out-of-bounds read
CVE-2022-28615		 CWE-125 Low
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 41 more
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-26377		 CWE-444 Medium
Available
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 39 more
#VU63349 - Improper Access Control
CVE-2021-33117		 CWE-284 Low
No
No
 - 17.05.2022 SB2022051745
SB2022061204
SB2022062041
and 5 more
#VU63348 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21151		 CWE-200 Low
No
No
 - 17.05.2022 SB2022051744
SB2022061204
SB2022062041
and 12 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720		 CWE-444 Medium
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU15643 - Improper Access Control
CVE-2018-18281		 CWE-284 Low
No
No
 1.3.1 31.10.2018 SB2018103107
SB2018112105
SB2019080809
and 10 more


Showing elements 41 - 60 out of 114