F5 Networks, Inc. vulnerabilities
109 vulnerabilities
Known vulnerabilities in F5 Networks, Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 58 products.
Products
50 of 58- BIG IP (Apm)19 vulnerabilities
- BIG IP (Ltm, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, Webaccelerator)16 vulnerabilities
- BIG IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe7 vulnerabilities
- BIG IP5 vulnerabilities
- BIG IP ASM5 vulnerabilities
- BIG IP AFM4 vulnerabilities
- Enterprise Manager4 vulnerabilities
- BIG IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, Websafe3 vulnerabilities
- BIG IP (Ltm, AAM, AFM, APM, ASM, Link Controller, PEM, Websafe)3 vulnerabilities
- BIG IP PEM3 vulnerabilities
- BIG IQ Centralized Management3 vulnerabilities
- BIG IP (Aam)2 vulnerabilities
- BIG IQ Cloud And Orchestration2 vulnerabilities
- Iworkflow2 vulnerabilities
- BIG IP AAM, PEM1 vulnerabilities
- BIG IP (Afm, ASM)1 vulnerabilities
- BIG IP (Analytics, LTM, AAM, AFM, APM, ASM, DNS, Edge, Gateway, GTM Link Controller, PEM, Webaccelerator, Websafe)1 vulnerabilities
- BIG IP (Apm), BIG IP APM Clients, BIG IP Edge Client1 vulnerabilities
- BIG IP APM Client For Linux1 vulnerabilities
- BIG IP APM Client For Linux And Mac OSX1 vulnerabilities
- BIG IP APM Client For Macos1 vulnerabilities
- BIG IP APM Client For Windows1 vulnerabilities
- BIG IP APM Clients1 vulnerabilities
- BIG IP APM; Enterprise Manager1 vulnerabilities
- BIG IP (ASM And Analytics)1 vulnerabilities
- BIG IP Azure Cloud Instance1 vulnerabilities
- BIG IP (Dns)1 vulnerabilities
- BIG IP (Dns, GTM)1 vulnerabilities
- BIG IP Edge Client1 vulnerabilities
- BIG IP (Ltm)1 vulnerabilities
- BIG IP (Ltm, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, Webaccelerator); Enterprise Manager1 vulnerabilities
- BIG IP (Ltm, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, Webaccelerator), Enterprise Manager, BIG IQ Centralized Management, F5 Iworkflow1 vulnerabilities
- BIG IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, Webaccelerator, Websafe1 vulnerabilities
- BIG IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Psm,Webaccelerator,Wom,Websafe1 vulnerabilities
- BIG IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Webaccelerator1 vulnerabilities
- BIG IP (Ltm, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Webaccelerator, Websafe)1 vulnerabilities
- BIG IP (Ltm, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Webaccelerator, Websafe); Enterprise Manager1 vulnerabilities
- BIG IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe1 vulnerabilities
- BIG IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, And Websafe1 vulnerabilities
- BIG IP (Ltm, AAM, AFM, Analytics, APM, ASM, Edge Gateway, FPS, Link Controller, PEM, Webaccelerator)1 vulnerabilities
- BIG IP LTM, AAM, AFM, Analytics, APM, ASM, Edge Gateway, GTM, Link Controller, PEM, PSM, Webaccelerator, Websafe1 vulnerabilities
- BIG IP (Ltm, AAM, AFM, Analytics, APM, ASM, Edge Gateway, PEM, Websafe)1 vulnerabilities
- BIG IP LTM, AAM, AFM, Analytics, ASM, DNS, GTM, PEM1 vulnerabilities
- BIG IP (Ltm, AAM, AFM, APM, ASM, Edge Gateway, GTM, PEM, Webaccelerator, Websafe)1 vulnerabilities
- BIG IP (Ltm, AAM, AFM, APM, ASM, Edge Gateway, Link Controller, PEM, PSM, Webaccelerator, Websafe)1 vulnerabilities
- BIG IP LTM, AAM, AFM, APM, ASM, GTM, Link Controller, PEM, PSM, Websafe1 vulnerabilities
- BIG IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM1 vulnerabilities
- BIG IP (Ltm, AAM, AFM, APM, ASM, Link Controller, PEM, Webaccelerator, Websafe)1 vulnerabilities
- BIG IP (Ltm, Aam,Afm, Analytics, APM ASM, Edge Gateway, FPS, PSM, Websafe)1 vulnerabilities
- BIG IQ Cloud, Device, Security, ADC, Centralized Management, Cloud And Orchestration1 vulnerabilities
CVE-2018-5547f5 networks, inc.big-ip apm client for windows+1
EPSS score0.26%
Windows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by default uses Legacy logon mode which uses a SYSTEM account to establish network access. This feature displays a certificate user interface dialog box which contains the link to the certificate policy. By clicking on the link, unprivileged users can open additional dialog boxes and get access to the local machine windows explorer which can be used to get administrator privilege. Windows Logon Integration is vulnerable when the APM client is installed by an administrator on a user machine. Users accessing the local machine can get administrator privilegesCVE-2018-5508f5 networks, inc.big-ip pem+1EPSS score0.85%
On F5 BIG-IP PEM versions 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.5.1-11.5.5, or 11.2.1, under certain conditions, TMM may crash when processing compressed data though a Virtual Server with an associated PEM profile using the content insertion option.CVE-2018-5545f5 networks, inc.f5 websafe alert server+1EPSS score2.39%
On F5 WebSafe Alert Server 1.0.0-4.2.6, a malicious, authenticated user can execute code on the alert server by using a maliciously crafted payload.CVE-2018-5540f5 networks, inc.big-ip (dns, gtm)+10EPSS score0.41%
On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.1.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.1.0-2.3.0 the big3d process does not irrevocably minimize group privileges at start up.CVE-2018-5543f5 networks, inc.f5 container connector+1EPSS score1.23%
The F5 BIG-IP Controller for Kubernetes 1.0.0-1.5.0 (k8s-bigip-crtl) passes BIG-IP username and password as command line parameters, which may lead to disclosure of the credentials used by the container.CVE-2018-5526f5 networks, inc.big-ip asm+1EPSS score1.96%
Under certain conditions, on F5 BIG-IP ASM 13.1.0-13.1.0.5, Behavioral DOS (BADOS) protection may fail during an attack.CVE-2018-5505f5 networks, inc.big-ip (asm and analytics)+2EPSS score2.04%
On F5 BIG-IP versions 13.1.0 - 13.1.0.3, when ASM and AVR are both provisioned, TMM may restart while processing DNS requests when the virtual server is configured with a DNS profile and the Protocol setting is set to TCP.CVE-2018-5536f5 networks, inc.big-ip (apm)+1EPSS score2.33%
A remote attacker via undisclosed measures, may be able to exploit an F5 BIG-IP APM 13.0.0-13.1.0.7 or 12.1.0-12.1.3.5 virtual server configured with an APM per-request policy object and cause a memory leak in the APM module.CVE-2018-5535f5 networks, inc.big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator)+13EPSS score2.57%
On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed by a Virtual Server with an associated QoE profile that has Video enabled, may cause TMM to incorrectly buffer response data causing the TMM to restart resulting in a Denial of Service.CVE-2018-5507f5 networks, inc.big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe)+13EPSS score1.09%
On F5 BIG-IP versions 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5, vCMP guests running on VIPRION 2100, 4200 and 4300 series blades cannot correctly decrypt ciphertext from established SSL sessions with small MTU.CVE-2018-5539f5 networks, inc.big-ip asm+1EPSS score1.76%
Under certain conditions, on F5 BIG-IP ASM 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, 11.5.1-11.5.6, or 11.2.1, when processing CSRF protections, the BIG-IP ASM bd process may restart and produce a core file.CVE-2018-5548f5 networks, inc.big-ip (apm)+1EPSS score1.44%
On BIG-IP APM 11.6.0-11.6.3, an insecure AES ECB mode is used for orig_uri parameter in an undisclosed /vdesk link of APM virtual server configured with an access profile, allowing a malicious user to build a redirect URI value using different blocks of cipher texts.CVE-2018-5528f5 networks, inc.big-ip (apm)+1EPSS score1.20%
Under certain conditions, TMM may restart and produce a core file while processing APM data on BIG-IP 13.0.1 or 13.1.0.4-13.1.0.7.CVE-2018-5509f5 networks, inc.big-ip (ltm, aam, afm, apm, asm, link controller, pem, websafe)+8EPSS score2.76%
On F5 BIG-IP versions 13.0.0 or 12.1.0 - 12.1.3.1, when a specifically configured virtual server receives traffic of an undisclosed nature, TMM will crash and take the configured failover action, potentially causing a denial of service. The configuration which exposes this issue is not common and in general does not work when enabled in previous versions of BIG-IP. Starting in 12.1.0, BIG-IP will crash if the configuration which exposes this issue is enabled and the virtual server receives non TCP traffic. With the fix of this issue, additional configuration validation logic has been added to prevent this configuration from being applied to a virtual server. There is only data plane exposure to this issue with a non-standard configuration. There is no control plane exposure.CVE-2018-5514f5 networks, inc.big-ip (ltm, aam, afm, apm, asm, link controller, pem, webaccelerator, websafe)+13EPSS score3.81%
On F5 BIG-IP 13.1.0-13.1.0.5, maliciously crafted HTTP/2 request frames can lead to denial of service. There is data plane exposure for virtual servers when the HTTP2 profile is enabled. There is no control plane exposure to this issue.CVE-2018-5532f5 networks, inc.big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator)+13EPSS score1.17%
On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be resolved by the cache even after the parent server revokes the record, if the DNS Cache is receiving a stream of requests for the cached name.CVE-2018-5534f5 networks, inc.big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator)+13EPSS score1.76%
Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic.CVE-2018-5503f5 networks, inc.big-ip pem+1EPSS score1.68%
On F5 BIG-IP versions 13.0.0 - 13.1.0.3 or 12.0.0 - 12.1.3.1, TMM may restart when processing a specifically crafted page through a virtual server with an associated PEM policy that has content insertion as an action.CVE-2018-5510f5 networks, inc.big-ip (analytics, ltm, aam, afm, apm, asm, dns, edge, gateway, gtm link controller, pem, webaccelerator, websafe)+13EPSS score1.03%
On F5 BIG-IP 11.5.4 HF4-11.5.5, the Traffic Management Microkernel (TMM) may restart when processing a specific sequence of packets on IPv6 virtual servers.CVE-2018-5533f5 networks, inc.big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, fps, gtm, link controller, pem, webaccelerator)+13EPSS score1.76%
Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic.