CVE-2014-4024: f5 big-ip_access_policy_manager
Vulnerability summary
CVE-2014-4024 is a medium (CVSS 5.9) vulnerability in f5 big-ip_access_policy_manager. EPSS estimates a 1.61% chance of exploitation in the next 30 days, higher than 75.5% of scored vulnerabilities.
Timeline
- 19-03-2018PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
SSL virtual servers in F5 BIG-IP systems 10.x before 10.2.4 HF9, 11.x before 11.2.1 HF12, 11.3.0 before HF10, 11.4.0 before HF8, 11.4.1 before HF5, 11.5.0 before HF5, and 11.5.1 before HF5, when used with third-party Secure Sockets Layer (SSL) accelerator cards, might allow remote attackers to have unspecified impact via a timing side-channel attack.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.61%
Chance of exploitation in the next 30 days
Percentile
76%
Versus all other CVEs
30-day change
0.00 pp
From 1.61% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
F513 products
- big-ip_access_policy_manager≥ 10.1.0, ≤ 10.2.4 | ≥ 11.0.0, ≤ 11.5.1
- big-ip_advanced_firewall_manager≥ 11.3.0, ≤ 11.5.1
- big-ip_analytics≥ 11.0.0, ≤ 11.5.1
- big-ip_application_acceleration_manager≥ 11.4.0, ≤ 11.5.1
- big-ip_application_security_manager≥ 10.0.0, ≤ 10.2.4 | ≥ 11.0.0, ≤ 11.5.1
1 vendor · 13 products