F5 Networks vulnerabilities

14 vulnerabilities

Known vulnerabilities in F5 Networks products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 11 products.

Products

11
7.5CVE-2016-9252f5 networksf5 big-ip ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, psm, webaccelerator, websafe+14
EPSS score
1.78%
The Traffic Management Microkernel (TMM) in F5 BIG-IP before 11.5.4 HF3, 11.6.x before 11.6.1 HF2 and 12.x before 12.1.2 does not properly handle minimum path MTU options for IPv6, which allows remote attackers to cause a denial-of-service (DoS) through unspecified vectors.5.9CVE-2016-9247f5 networksf5 big-ip ltm, aam, afm, analytics, apm, asm, dns, link controller, pem, websafe+10
EPSS score
1.89%
Under certain conditions for BIG-IP systems using a virtual server with an associated FastL4 profile and TCP analytics profile, a specific sequence of packets may cause the Traffic Management Microkernel (TMM) to restart.5.9CVE-2016-9245f5 networksf5 big-ip ltm, aam, afm, analytics, apm, asm, dns, link controller, pem, websafe+10
EPSS score
1.38%
In F5 BIG-IP systems 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings. The issue is also exposed with the non-default "Normalize URI" configuration options used in iRules and/or BIG-IP LTM policies. An attacker may be able to disrupt traffic or cause the BIG-IP system to fail over to another device in the device group.7.8CVE-2016-9249f5 networksf5 big-ip ltm, aam, afm, analytics, apm, asm, dns, link controller, pem, websafe+10
EPSS score
2.01%
An undisclosed traffic pattern received by a BIG-IP Virtual Server with TCP Fast Open enabled may cause the Traffic Management Microkernel (TMM) to restart, resulting in a Denial-of-Service (DoS).7.5CVE-2016-9244f5 networksf5 big-ip ltm, aam, afm, analytics, apm, asm, gtm, link controller, pem, psm+10
EPSS score
74.00%
A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer (SSL) session IDs from other sessions. It is possible that other data from uninitialized memory may be returned as well.5.3CVE-2016-7467f5 networksf5 big-ip apm+1
EPSS score
1.92%
The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider (SP) connector, might allow traffic to be disrupted or failover initiated when a malformed, signed SAML authentication request from an authenticated user is sent via the SP connector.5.5CVE-2016-7474f5 networksf5 big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem+14
EPSS score
0.36%
In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain normally unrecoverable information.5.9CVE-2016-7468f5 networksf5 big-ip ltm, aam, afm, analytics, apm, asm, link controller, pem, psm,+10
EPSS score
1.77%
An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic. This vulnerability affects virtual servers associated with TCP profiles when the BIG-IP system's tm.tcpprogressive db variable value is set to non-default setting "enabled". The default value for the tm.tcpprogressive db variable is "negotiate". An attacker may be able to disrupt traffic or cause the BIG-IP system to fail over to another device in the device group.5.9CVE-2016-5024f5 networksf5 big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem+10
EPSS score
1.82%
Virtual servers in F5 BIG-IP systems 11.6.1 before 11.6.1 HF1 and 12.1.x before 12.1.2, when configured to parse RADIUS messages via an iRule, allow remote attackers to cause a denial of service (Traffic Management Microkernel restart) via crafted network traffic.5.3CVE-2016-6249f5 networksf5 big-ip, rest framework logging+11
EPSS score
0.33%
F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive attributes such as passwords in plaintext to /var/log/restjavad.0.log. It may allow local users to obtain sensitive information by reading these files.9.8CVE-2017-0305f5 networksssl intercept iapp version+1
EPSS score
3.78%
F5 SSL Intercept iApp version 1.5.0 - 1.5.7 is vulnerable to an unauthenticated, remote attack that may allow modification of the BIG-IP system configuration, extraction of sensitive system files, and possible remote command execution on the system when deployed using the Explicit Proxy feature plus SNAT Auto Map option for egress traffic.7.4CVE-2017-6130f5 networksssl intercept iapp 1.5.0 - 1.5.7 and ssl orchestrator 2.0+2
EPSS score
1.15%
F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) attack when deployed using the Dynamic Domain Bypass (DDB) feature feature plus SNAT Auto Map option for egress traffic.9.1CVE-2019-6650f5 networksbig-ip asm+1
EPSS score
1.31%
F5 BIG-IP ASM 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 may expose sensitive information and allow the system configuration to be modified when using non-default settings.9.1CVE-2019-6649f5 networksbig-ip, enterprise manager+14
EPSS score
1.29%
F5 BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 and Enterprise Manager 3.1.1 may expose sensitive information and allow the system configuration to be modified when using non-default ConfigSync settings.