Known vulnerabilities in Traffix SDC 5.1.0 CF-35

Vendor: F5 Networks
Software: Traffix SDC
Version: 5.1.0 CF-35
Software CPE: cpe:2.3:a:f5_networks:traffix_sdc:*:*:*:*:*:*:*:*
Website: https://f5.com/
Total vulnerabilities: 41
Public exploits: 9
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Traffix SDC version 5.1.0 CF-35 Traffix SDC 5.1.0 CF-35 is affected by 41 vulnerabilities: 1 critical, 5 high, 19 medium, 16 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93545 - Server-Side Request Forgery (SSRF)
CVE-2024-39573		 CWE-918 Medium
No
No
 - 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 46 more
#VU93543 - Server-Side Request Forgery (SSRF)
CVE-2024-38476		 CWE-918 High
No
No
 - 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 61 more
#VU93542 - Improper input validation
CVE-2024-38475		 CWE-20 Critical
Public exploit available
No
 - 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 54 more
#VU93541 - Improper input validation
CVE-2024-38474		 CWE-20 Medium
No
No
 - 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 57 more
#VU93540 - Improper input validation
CVE-2024-38473		 CWE-20 Medium
Public exploit available
No
 - 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 47 more
#VU90156 - Security Features
CVE-2024-35195		 CWE-254 Low
No
No
 5.2.0 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 117 more
#VU89710 - Allocation of Resources Without Limits or Throttling
CVE-2024-33601		 CWE-770 Low
No
No
 - 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 82 more
#VU89677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34064		 CWE-79 Medium
No
No
 5.2.0 20.05.2024 SB2024052067
SB2024052081
SB2024052082
and 83 more
#VU87672 - Improper input validation
CVE-2024-28835		 CWE-20 Medium
No
No
 - 20.03.2024 SB2024032057
SB2024032058
SB2024032059
and 71 more
#VU87671 - Cryptographic Issues
CVE-2024-28834		 CWE-310 Medium
No
No
 - 20.03.2024 SB2024032057
SB2024032058
SB2024032059
and 111 more
#VU86807 - Out-of-bounds read
CVE-2024-25629		 CWE-125 Low
No
No
 - 26.02.2024 SB2024022648
SB2024030621
SB2024032954
and 38 more
#VU85368 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-22195		 CWE-79 Medium
No
No
 - 15.01.2024 SB2024011508
SB2024011512
SB2024011513
and 60 more
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51385		 CWE-78 Medium
Public exploit available
No
 - 26.12.2023 SB2023121905
SB2023122710
SB2023122801
and 65 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Public exploit available
No
 - 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU82894 - Resource Management Errors
CVE-2023-5678		 CWE-399 Medium
No
No
 - 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more
#VU81800 - Resource Management Errors
CVE-2023-42795		 CWE-399 Medium
No
No
 - 10.10.2023 SB2023101084
SB2023101122
SB2023101123
and 47 more
#VU78798 - Resource Management Errors
CVE-2023-3817		 CWE-399 Low
No
No
 - 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU75604 - Improper Certificate Validation
CVE-2023-31484		 CWE-295 Medium
No
No
 5.2.0 01.05.2023 SB2023050116
SB2023052927
SB2023060526
and 39 more
#VU66396 - Use After Free
CVE-2022-2586		 CWE-416 Low
Public exploit available
Exploited
 - 11.08.2022 SB2022081108
SB2022081110
SB2022081111
and 53 more
#VU55423 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-33037		 CWE-444 Medium
No
No
 - 29.07.2021 SB2021072907
SB2021080807
SB2021080808
and 30 more


Showing elements 1 - 20 out of 41