BA
Product
Big-ip Analytics
On CISA KEVExploited in the wildRansomware-linked
510
CVEs
11
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 34High 277Medium 176Low 4
Watch
Add Big-ip Analytics to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-5391 | 7.5 | Sep 6 | The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly Affected: 11.5.1 before 11.6.5.1; 12.1.0 before 12.1.5; 13.0.0 before 13.1.3; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.2.4 |
| CVE-2018-5390 | 7.5 | Aug 6 | Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service Affected: 11.5.1 through 11.6.3; 12.1.0 through 12.1.3; 13.0.0 through 13.1.1; 14.0.0 |
| CVE-2018-5530 | 7.5 | Jul 25 | F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.1 virtual servers with HTTP/2 profiles enabled are vulnerable to "HPACK Bomb" Affected: 11.6.0 through 11.6.3.1; 12.1.0 through 12.1.3.5; 13.0.0 through 13.1.0.5 |
| CVE-2018-5535 | 7.5 | Jul 19 | On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed by a Virtual Server with an associated QoE profile that has… Affected: 11.2.1 through 11.6.3; 12.1.0 through 12.1.3; 13.0.0 through 13.1.1; 14.0.0 |
| CVE-2018-5534 | 7.5 | Jul 19 | Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic Affected: 11.5.0 through 11.5.6; 11.6.0 through 11.6.3.1; 12.1.0 through 12.1.3.1; 13.1.0 through 13.1.0.5; 13.0.0 |
| CVE-2018-5533 | 7.5 | Jul 19 | Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic Affected: 11.5.0 through 11.5.6; 11.6.0 through 11.6.3.1; 12.1.0 through 12.1.2; 13.0.0 |
| CVE-2018-5527 | 7.5 | Jun 27 | On BIG-IP 13.1.0-13.1.0.7, a remote attacker using undisclosed methods against virtual servers configured with a Client SSL or Server SSL profile that has the SSL Forward Proxy… Affected: 13.0.0 through 13.1.0.7 |
| CVE-2018-5513 | 7.5 | Jun 1 | On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.3, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, a malformed TLS handshake causes TMM to crash leading to a disruption of service Affected: 11.2.1 through 11.5.5; 11.6.1 through 11.6.3; 12.1.0 through 12.1.3; 13.1.0 through 13.1.0.4; 13.0.0 |
| CVE-2018-5517 | 7.5 | May 2 | On F5 BIG-IP 13.1.0-13.1.0.5, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service Affected: 13.1.0 through 13.1.0.5 |
| CVE-2018-5514 | 7.5 | May 2 | On F5 BIG-IP 13.1.0-13.1.0.5, maliciously crafted HTTP/2 request frames can lead to denial of service Affected: 13.1.0 through 13.1.0.5 |
| CVE-2018-5512 | 7.5 | May 2 | On F5 BIG-IP 13.1.0-13.1.0.5, when Large Receive Offload (LRO) and SYN cookies are enabled (default settings), undisclosed traffic patterns may cause TMM to restart Affected: 13.1.0 through 13.1.0.5 |
| CVE-2018-5510 | 7.5 | Apr 13 | On F5 BIG-IP 11.5.4 HF4-11.5.5, the Traffic Management Microkernel (TMM) may restart when processing a specific sequence of packets on IPv6 virtual servers Affected: 11.5.4; 11.5.4; 11.5.4; 11.5.4; 11.5.4; 11.5.5 |
| CVE-2018-5507 | 7.5 | Apr 13 | On F5 BIG-IP versions 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5, vCMP guests running on VIPRION 2100, 4200 and 4300 series blades cannot correctly decrypt… Affected: 11.5.1 through 11.5.5; 11.6.1 through 11.6.2; 12.1.0 through 12.1.3; 13.0.0 |
| CVE-2018-5502 | 7.5 | Mar 22 | On F5 BIG-IP versions 13.0.0 - 13.1.0.3, attackers may be able to disrupt services on the BIG-IP system with maliciously crafted client certificate Affected: 13.0.0 before 13.1.0.4 |
| CVE-2017-6150 | 7.5 | Mar 1 | Under certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles, when the Reassemble IP Fragments option is disabled (default), some specific… Affected: 12.1.0 through 12.1.3.1; 13.0.0 |
| CVE-2017-6167 | 7.5 | Dec 21 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, race conditions in iControl REST may lead to… Affected: 12.1.0 through 12.1.2; 13.0.0 |
| CVE-2017-6151 | 7.5 | Dec 21 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, undisclosed requests made to… Affected: 13.0.0 |
| CVE-2017-6140 | 7.5 | Dec 21 | On the BIG-IP 2000s, 2200s, 4000s, 4200v, i5600, i5800, i7600, i7800, i10600,i10800, and VIPRION 4450 blades, running version 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0,… Affected: 11.5.0; 11.5.1; 11.5.2; 11.5.3; 11.5.4; 11.6.0; +5 more |
| CVE-2017-6138 | 7.5 | Dec 21 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, malicious requests made to virtual servers… Affected: 12.1.0 through 12.1.2; 13.0.0 |
| CVE-2017-6135 | 7.5 | Dec 21 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, a slow memory leak as a result of undisclosed IPv4 or IPv6… Affected: 13.0.0 |
| CVE-2017-6133 | 7.5 | Dec 21 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, undisclosed HTTP requests may cause a denial of… Affected: 12.1.0 through 12.1.2; 13.0.0 |
| CVE-2017-6132 | 7.5 | Dec 21 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 and 11.5.0 - 11.5.4, an… Affected: 11.6.0 through 11.6.1; 12.0.0 through 12.1.2; 11.5.0; 11.5.1; 11.5.2; 11.5.3; +2 more |
| CVE-2016-9250 | 7.5 | May 10 | In F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user with access to the control plane may be able to delete arbitrary files through an… Affected: 11.2.1; 11.4.0; 11.4.1; 11.5.0; 11.5.1; 11.5.2; +8 more |
| CVE-2016-9256 | 7.5 | May 9 | In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the role_map is not reloaded between the time the… Affected: 12.0.0; 12.1.0; 12.1.1; 12.1.2 |
| CVE-2016-9253 | 7.5 | May 9 | In F5 BIG-IP 12.1.0 through 12.1.2, specific websocket traffic patterns may cause a disruption of service for virtual servers configured to use the websocket profile Affected: 12.1.0; 12.1.1; 12.1.2 |
| CVE-2017-6128 | 7.5 | May 1 | An attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in F5 BIG-IP, Enterprise Manager, BIG-IQ, and iWorkflow Affected: 11.2.1; 11.4.0; 11.4.1; 11.5.0; 11.5.1; 11.5.2; +4 more |
| CVE-2016-9252 | 7.5 | Mar 27 | The Traffic Management Microkernel (TMM) in F5 BIG-IP before 11.5.4 HF3, 11.6.x before 11.6.1 HF2 and 12.x before 12.1.2 does not properly handle minimum path MTU options for… Affected: 11.2.1; 11.4.0; 11.4.1; 11.5.0; 11.5.1; 11.5.2; +7 more |
| CVE-2016-9244 | 7.5 | Feb 9 | A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory Affected: 11.4.0; 11.4.1; 11.5.0; 11.5.1; 11.5.2; 11.5.3; +7 more |
| CVE-2016-9249 | 7.5 | Jan 31 | An undisclosed traffic pattern received by a BIG-IP Virtual Server with TCP Fast Open enabled may cause the Traffic Management Microkernel (TMM) to restart, resulting in a… Affected: 12.0.0; 12.1.0; 12.1.1 |
| CVE-2016-6876 | 7.5 | Sep 7 | The RESOLV::lookup iRule command in F5 BIG-IP LTM, APM, ASM, and Link Controller 10.2.1 through 10.2.4, 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.0.0… Affected: 11.2.1; 11.4.0; 11.4.1; 11.5.0; 11.5.1; 11.5.2; +4 more |
| CVE-2016-5023 | 7.5 | Aug 26 | Virtual servers in F5 BIG-IP systems 11.2.1 HF11 through HF15, 11.4.1 HF4 through HF10, 11.5.3 through 11.5.4, 11.6.0 HF5 through HF7, and 12.0.0, when configured with a TCP… Affected: 11.2.1; 11.4.1; 11.5.3; 11.5.4; 11.6.0; 12.0.0 |
| CVE-2016-5736 | 7.5 | Aug 19 | The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x… Affected: 11.2.1; 11.4.0; 11.4.1; 11.5.0; 11.5.1; 11.5.2; +4 more |
| CVE-2015-8022 | 7.5 | Aug 19 | The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and… Affected: 11.0.0; 11.1.0; 11.2.0; 11.2.1; 11.3.0; 11.4.0; +6 more |
| CVE-2016-4545 | 7.5 | Jun 7 | Virtual servers in F5 BIG-IP 11.5.4, when SSL profiles are enabled, allow remote attackers to cause a denial of service (resource consumption and Traffic Management Microkernel… Affected: 11.5.4 |
| CVE-2015-8240 | 7.5 | Apr 11 | The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM before 11.4.1 HF10, 11.5.x before 11.5.4, and 11.6.x… Affected: 11.4.1; 11.5.3; 11.6.0 |
| CVE-2015-5516 | 7.5 | Jan 20 | Memory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before… Affected: 11.0.0; 11.1.0; 11.2.0; 11.2.1; 11.3.0; 11.4.0; +6 more |
| CVE-2020-5913 | 7.4 | Aug 26 | In versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, the BIG-IP Client or Server SSL profile ignores revoked certificates, even… Affected: 11.6.1 before 11.6.5; 12.1.0 before 12.1.5.2; 13.1.0 before 13.1.3; 14.1.0 before 14.1.2-0.89.37; 14.1.2.1 before 14.1.2.5; 15.0.0 before 15.0.1.2 |
| CVE-2018-5531 | 7.4 | Jul 25 | Through undisclosed methods, on F5 BIG-IP 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.2.1-11.5.6, adjacent network attackers can cause a denial of service for VCMP… Affected: 11.2.1 through 11.5.6; 11.6.0 through 11.6.3.1; 12.1.0 through 12.1.3.5; 13.0.0 through 13.1.0.7 |
| CVE-2017-6168 | 7.4 | Nov 17 | On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (fixed in 13.0.0 HF3) a virtual server configured with a… Affected: 11.6.0 through 11.6.2; 12.0.0 through 12.1.2; 13.0.0 |
| CVE-2016-2084 | 7.4 | Apr 13 | F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256,… Affected: 11.3.0; 11.4.0; 11.4.1; 11.5.0; 11.5.1; 11.5.2; +4 more |
| CVE-2015-7393 | 7.4 | Jan 12 | dcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AAM 11.4.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1,… Affected: 11.0.0; 11.1.0; 11.2.0; 11.2.1; 11.3.0; 11.4.0; +5 more |
| CVE-2017-6145 | 7.3 | Oct 20 | iControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 through 12.1.2 and 13.0.0 includes a service to convert authorization… Affected: 12.1.0; 12.1.1; 12.1.2; 13.0.0 |
| CVE-2026-39459 | 7.2 | May 13 | iControl REST and tmsh vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0 |
| CVE-2024-45844 | 7.2 | Oct 16 | BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings. Note: Software versions which have reached End… Affected: 15.1.0 before 15.1.10.5; 16.1.0 before 16.1.5; 17.1.0 before 17.1.1.4 |
| CVE-2024-22389 | 7.2 | Feb 14 | When BIG-IP is deployed in high availability (HA) and an iControl REST API token is updated, the change does not sync to the peer device Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0 |
| CVE-2023-42768 | 7.2 | Oct 10 | When a non-admin user has been assigned an administrator role via an iControl REST PUT request and later the user's role is reverted back to a non-admin role via the Configuration… Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4 |
| CVE-2022-35735 | 7.2 | Aug 4 | BIG-IP monitor configuration vulnerability CVE-2022-35735 Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.1; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1 |
| CVE-2021-23015 | 7.2 | May 10 | On BIG-IP 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.0.8 through 13.1.3.6, and all versions of 16.0.x, when running in Appliance Mode, an authenticated user assigned the… Affected: 13.1.0 before 13.1.4; 14.1.0 before 14.1.4; 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.1 |
| CVE-2021-22990 | 7.2 | Mar 31 | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, on systems… Affected: 11.6.1 before 11.6.5.3; 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.4; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1 |
| CVE-2020-5907 | 7.2 | Jul 1 | In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, an authorized user provided with access only to the TMOS Shell (tmsh)… Affected: 11.5.2 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3; 14.1.0 through 14.1.2; 15.0.0 through 15.1.0 |
The 500 most important CVEs for this product (exploited first, then by severity)