BE
Product
Big-ip Edge Gateway
On CISA KEVExploited in the wild
293
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 144Medium 115Low 3
Watch
Add Big-ip Edge Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-7169 In wildKEV | 9.8 | Sep 25 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 10.1.0 through 10.2.4; 11.0.0 through 11.3.0 |
| CVE-2014-6271 In wildKEV | 9.8 | Sep 24 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 10.1.0 through 10.2.4; 11.0.0 through 11.3.0 |
| CVE-2019-6609 | 9.8 | Apr 15 | Platform dependent weakness Affected: 12.1.2 before 12.1.4.1; 13.0.0 before 13.1.1.4; 14.0.0 before 14.1.0.2; 12.1.1 |
| CVE-2018-5506 | 9.8 | Apr 13 | In F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, or 11.2.1 the Apache modules apache_auth_token_mod and mod_auth_f5_auth_token.cpp allow possible unauthenticated… Affected: 11.5.1 through 11.5.5; 12.1.0 through 12.1.3.1; 11.2.1; 11.6.1; 13.0.0 |
| CVE-2016-5022 | 9.8 | Sep 7 | F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1 HF1, and 12.x before 12.0.0 HF3;… Affected: 11.2.0; 11.2.1; 11.3.0 |
| CVE-2019-6644 | 9.4 | Sep 4 | Similar to the issue identified in CVE-2018-12120, on versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, and 12.1.0-12.1.4 BIG-IP will bind a debug nodejs process to all… Affected: 12.1.3 through 12.1.4; 13.0.0 through 13.1.2; 14.0.0; 14.1.0 |
| CVE-2026-41225 | 9.1 | May 13 | iControl REST vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0 |
| CVE-2020-5887 | 9.1 | Apr 30 | On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, BIG-IP Virtual Edition (VE) may expose a mechanism for remote attackers to access local daemons and bypass port… Affected: 14.1.0 through 14.1.2.3; 15.0.0 through 15.0.1.2; 15.1.0 through 15.1.0.1 |
| CVE-2019-6649 | 9.1 | Sep 20 | F5 BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 and Enterprise Manager 3.1.1 may expose sensitive… Affected: 11.5.2 through 11.5.9; 11.6.1 through 11.6.4; 12.1.0 through 12.1.4; 13.1.0 through 13.1.1; 14.0.0; 14.1.0; +1 more |
| CVE-2019-10744 | 9.1 | Jul 26 | Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution Affected: 12.1.0 before 12.1.5.2; 13.1.0 before 13.1.3.4; 14.1.0 before 14.1.2.5; 15.0.0 before 15.0.1.4; 15.1.0 before 15.1.0.2 |
| CVE-2019-6592 | 9.1 | Feb 26 | On BIG-IP 14.1.0-14.1.0.1, TMM may restart and produce a core file when validating SSL certificates in client SSL or server SSL profiles Affected: 14.1.0 through 14.1.0.1 |
| CVE-2011-3188 | 9.1 | May 24 | The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes… Affected: 10.1.0 through 10.2.4; 11.0.0 through 11.1.0 |
Showing 12