F5 Networks, Inc. Iworkflow vulnerabilities

2 vulnerabilities

Known vulnerabilities in F5 Networks, Inc. Iworkflow, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.7CVE-2018-5516f5 networks, inc.big-ip (ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, websafe)+21
EPSS score
0.31%
On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.0.2-2.3.0, authenticated users granted TMOS Shell (tmsh) access can access objects on the file system which would normally be disallowed by tmsh restrictions. This allows for authenticated, low privileged attackers to exfiltrate objects on the file system which should not be allowed.7.5CVE-2017-6128f5 networks, inc.big-ip ltm, aam, afm, analytics, apm, asm, edge gateway, gtm, link controller, pem, psm, webaccelerator, websafe+24
EPSS score
1.40%
An attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in F5 BIG-IP, Enterprise Manager, BIG-IQ, and iWorkflow.