BP
Product
Big-ip Protocol Security Module
On CISA KEVExploited in the wild
59
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 21Medium 18Low 0
Watch
Add Big-ip Protocol Security Module to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-0196 In wildKEV | 5.5 | May 7 | Linux Kernel Race Condition Vulnerability Affected: 11.1.0 through 11.4.1 |
| CVE-2019-6604 | 6.8 | Mar 28 | On BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3.6, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2, under certain conditions, hardware systems with a High-Speed Bridge and using… Affected: 11.2.1 through 11.5.8 |
| CVE-2018-15322 | 6.5 | Oct 31 | On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 6.0.0-6.0.1, 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and… Affected: 11.2.1 through 11.5.6; 11.6.0 through 11.6.3.2; 12.1.0 through 12.1.3.5; 13.0.0 through 13.1.0.7; 14.0.0 through 14.0.0.2 |
| CVE-2013-3587 | 5.9 | Feb 21 | The HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which makes it easier for… Affected: 9.4.5 through 9.4.8; 10.0.0 through 10.2.4; 11.0.0 through 11.4.1 |
| CVE-2019-6608 | 5.9 | Mar 28 | On BIG-IP 11.5.1-11.6.3, 12.1.0-12.1.3, 13.0.0-13.1.1.1, and 14.0.0-14.0.0.2, under certain conditions, the snmpd daemon may leak memory on a multi-blade BIG-IP vCMP guest when… Affected: 11.2.1 through 11.6.3 |
| CVE-2018-15323 | 5.9 | Oct 31 | On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, in certain circumstances, when processing traffic through a Virtual Server with an associated MQTT profile, the TMM process may… Affected: 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2 |
| CVE-2014-4024 | 5.9 | Mar 19 | SSL virtual servers in F5 BIG-IP systems 10.x before 10.2.4 HF9, 11.x before 11.2.1 HF12, 11.3.0 before HF10, 11.4.0 before HF8, 11.4.1 before HF5, 11.5.0 before HF5, and 11.5.1… Affected: 10.0.0 through 10.2.4; 11.0.0 through 11.4.1 |
| CVE-2017-6163 | 5.9 | Oct 27 | In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, when a virtual server uses the standard… Affected: after 11.4.0 through 11.5.4; 11.6.0; 11.6.1; 12.0.0; 12.1.0; 12.1.1; +1 more |
| CVE-2016-7468 | 5.9 | Mar 23 | An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic Affected: 11.4.0; 11.4.1 |
| CVE-2015-8099 | 5.9 | May 13 | F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF1; BIG-IP… Affected: 11.3.0; 11.4.0; 11.4.1 |
| CVE-2016-7474 | 5.5 | Mar 27 | In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain normally… Affected: 11.4.0; 11.4.1 |
| CVE-2016-7469 | 5.4 | Jun 9 | A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link… Affected: 11.4.0; 11.4.1 |
| CVE-2014-5209 | 5.3 | Jan 8 | An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive… Affected: 10.2.1 through 10.2.4; 11.4.0 through 11.4.1 |
| CVE-2018-15321 | 4.9 | Oct 31 | When BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and… Affected: 11.2.1 through 11.5.6; 11.6.0 through 11.6.3.2; 12.1.0 through 12.1.3.5; 13.0.0 through 13.1.0.7; 14.0.0 through 14.0.0.2 |
| CVE-2014-6031 | 4.9 | Jun 8 | Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x before 11.4.1 HF9, 11.5.x before 11.5.2 HF1, and 11.6.0… Affected: 10.0.0; 10.1.0; 10.2.0; 10.2.1; 10.2.2; 10.2.3; +8 more |
| CVE-2016-1497 | 4.9 | Aug 26 | The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x before 11.6.1, and… Affected: 11.0.0; 11.1.0; 11.2.0; 11.2.1; 11.3.0; 11.4.0; +1 more |
| CVE-2018-15325 | 4.3 | Oct 31 | In BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, iControl and TMSH usage by authenticated users may leak a small amount of memory when executing commands Affected: 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2 |
| CVE-2015-8021 | 4.3 | Apr 12 | Incomplete blacklist vulnerability in the Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, Link Controller, and PSM 11.x before 11.2.1 HF11, 11.3.x, 11.4.0 before… Affected: 11.0.0; 11.1.0; 11.2.0; 11.2.1; 11.3.0; 11.4.0; +1 more |
Showing 18