Known vulnerabilities in Traffix SDC 5.1.0 CF-35 - page 2

Vendor: F5 Networks
Software: Traffix SDC
Version: 5.1.0 CF-35
Software CPE: cpe:2.3:a:f5_networks:traffix_sdc:*:*:*:*:*:*:*:*
Website: https://f5.com/
Total vulnerabilities: 41
Public exploits: 9
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Traffix SDC version 5.1.0 CF-35 Traffix SDC 5.1.0 CF-35 is affected by 41 vulnerabilities: 1 critical, 5 high, 19 medium, 16 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93424 - Out-of-bounds read
CVE-2024-5535		 CWE-125 Low
Public exploit available
No
 - 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 154 more
#VU88822 - Memory corruption
CVE-2024-2961		 CWE-119 High
Public exploit available
Exploited
 - 18.04.2024 SB2024041855
SB2024041856
SB2024041857
and 107 more
#VU81693 - Use After Free
CVE-2023-4921		 CWE-416 Low
No
No
 - 08.10.2023 SB2023100808
SB2023100810
SB2023101184
and 109 more
#VU76651 - Resource Management Errors
CVE-2023-2650		 CWE-399 Medium
No
No
 - 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU75562 - Improper input validation
CVE-2023-20861		 CWE-20 Medium
No
No
 - 27.04.2023 SB2023042742
SB2023042746
SB2023042832
and 61 more
#VU70442 - Stack-based buffer overflow
CVE-2022-4378		 CWE-121 Low
No
No
 5.2.0 20.12.2022 SB2022122008
SB2022122123
SB2022122124
and 124 more
#VU66397 - Double Free
CVE-2022-2588		 CWE-415 Low
Public exploit available
Exploited
 - 11.08.2022 SB2022081109
SB2022081110
SB2022081111
and 99 more
#VU64627 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34305		 CWE-79 Medium
Public exploit available
No
 - 23.06.2022 SB2022062338
SB2022071177
SB2022071801
and 26 more
#VU64089 - Improper Authentication
CVE-2022-31813		 CWE-287 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU64083 - Out-of-bounds read
CVE-2022-28615		 CWE-125 Low
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 41 more
#VU64081 - Out-of-bounds read
CVE-2022-28614		 CWE-125 Low
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 36 more
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-26377		 CWE-444 Medium
Public exploit available
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 39 more
#VU63299 - Error Handling
CVE-2022-25762		 CWE-388 Medium
No
No
 - 17.05.2022 SB2022051715
SB2022071173
SB2022072094
and 14 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720		 CWE-444 Medium
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU60842 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-24407		 CWE-89 High
No
No
 - 24.02.2022 SB2022022409
SB2022022410
SB2022022421
and 67 more
#VU60797 - Use After Free
CVE-2021-4028		 CWE-416 Low
No
No
 5.2.0 22.02.2022 SB2022022230
SB2022022231
SB2022022232
and 32 more
#VU59693 - Deserialization of Untrusted Data
CVE-2020-9493		 CWE-502 High
No
No
 - 18.01.2022 SB2021061626
SB2022011819
SB2022012640
and 62 more
#VU48942 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-27216		 CWE-362 Low
No
No
 - 23.10.2020 SB2020121307
SB2020121308
SB2021012011
and 27 more
#VU21942 - Memory corruption
CVE-2019-18197		 CWE-119 High
No
No
 5.2.0 19.10.2019 SB2019070210
SB2019102303
SB2020020601
and 23 more
#VU15668 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0734		 CWE-200 Low
No
No
 5.2.0 01.11.2018 SB2018110102
SB2018112201
SB2018112602
and 39 more


Showing elements 21 - 40 out of 41