F5 Networks, Inc. BIG IP vulnerabilities
5 vulnerabilities
Known vulnerabilities in F5 Networks, Inc. BIG IP, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2016-9256f5 networks, inc.big-ip+10
EPSS score1.04%
In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the role_map is not reloaded between the time the permissions are changed and the time of the user's next request. This is a race condition that occurs rarely in normal usage; the typical period in which this is possible is limited to at most a few seconds after the permission change.CVE-2016-9251f5 networks, inc.big-ip+10EPSS score1.51%
In F5 BIG-IP 12.0.0 through 12.1.2, an authenticated attacker may be able to cause an escalation of privileges through a crafted iControl REST connection.CVE-2016-9250f5 networks, inc.big-ip+14EPSS score0.90%
In F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user with access to the control plane may be able to delete arbitrary files through an undisclosed mechanism.CVE-2016-9253f5 networks, inc.big-ip+10EPSS score1.33%
In F5 BIG-IP 12.1.0 through 12.1.2, specific websocket traffic patterns may cause a disruption of service for virtual servers configured to use the websocket profile.CVE-2016-7475f5 networks, inc.big-ip+8EPSS score1.32%
Under some circumstances on BIG-IP 12.0.0-12.1.0, 11.6.0-11.6.1, or 11.4.0-11.5.4 HF1, the Traffic Management Microkernel (TMM) may not properly clean-up pool member network connections when using SPDY or HTTP/2 virtual server profiles.