BC
Product
Big-iq Cloud
On CISA KEVExploited in the wild
18
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 4Low 0
Watch
Add Big-iq Cloud to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-0196 In wildKEV | 5.5 | May 7 | Linux Kernel Race Condition Vulnerability Affected: 4.0.0 through 4.5.0 |
| CVE-2016-5022 | 9.8 | Sep 7 | F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1 HF1, and 12.x before 12.0.0 HF3;… Affected: 4.0.0; 4.1.0; 4.2.0; 4.3.0; 4.4.0; 4.5.0 |
| CVE-2017-6128 | 7.5 | May 1 | An attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in F5 BIG-IP, Enterprise Manager, BIG-IQ, and iWorkflow Affected: 4.4.0; 4.5.0 |
| CVE-2015-5516 | 7.5 | Jan 20 | Memory leak in the last hop kernel module in F5 BIG-IP LTM, GTM, and Link Controller 10.1.x, 10.2.x before 10.2.4 HF13, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x, 11.5.x before… Affected: 4.0.0; 4.1.0; 4.2.0; 4.3.0; 4.4.0; 4.5.0 |
| CVE-2016-2084 | 7.4 | Apr 13 | F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256,… Affected: 4.2.0; 4.3.0; 4.4.0; 4.5.0 |
| CVE-2015-7393 | 7.4 | Jan 12 | dcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP AAM 11.4.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1,… Affected: 4.0.0; 4.1.0; 4.2.0; 4.3.0; 4.4.0; 4.5.0 |
| CVE-2015-8099 | 5.9 | May 13 | F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF1; BIG-IP… Affected: 4.0.0; 4.1.0; 4.2.0; 4.3.0; 4.4.0; 4.5.0 |
| CVE-2014-5209 | 5.3 | Jan 8 | An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive… Affected: 4.0.0 through 4.5.0 |
| CVE-2016-5021 | 4.9 | Jun 24 | The iControl REST service in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.5.x before 11.5.4, 11.6.x before 11.6.1, and 12.x before 12.0.0 HF3; BIG-IP… Affected: 4.0.0; 4.1.0; 4.2.0; 4.3.0; 4.4.0; 4.5.0 |
| CVE-2015-3628 | – | Dec 7 | The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0 before 11.5.3 HF2 and 11.6.0 before 11.6.0 HF6, BIG-IP AAM 11.4.0 before 11.5.3 HF2… Affected: 4.0.0; 4.1.0; 4.2.0; 4.3.0; 4.4.0; 4.5.0 |
| CVE-2015-7394 | – | Nov 6 | The datastor kernel module in F5 BIG-IP Analytics, APM, ASM, Link Controller, and LTM 11.1.0 before 12.0.0, BIG-IP AAM 11.4.0 before 12.0.0, BIG-IP AFM, PEM 11.3.0 before 12.0.0,… Affected: 4.0.0; 4.1.0; 4.2.0; 4.3.0; 4.4.0; 4.5.0 |
| CVE-2015-5058 | – | Aug 24 | Memory leak in the virtual server component in F5 Big-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.5.x before 11.5.1 HF10, 11.5.3 before HF1, and 11.6.0… Affected: 4.4.0; 4.5.0 |
| CVE-2015-4637 | – | Jul 16 | The REST API in F5 BIG-IQ Cloud, Device, and Security 4.4.0 and 4.5.0 before HF2 and ADC 4.5.0 before HF2, when configured for LDAP remote authentication and the LDAP server… Affected: 4.4.0; 4.5.0 |
| CVE-2015-4047 | – | May 29 | racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests Affected: 4.0.0 through 4.5.0 |
| CVE-2014-8730 | – | Dec 10 | The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, AAM 11.4.0 through 11.5.1, AFM 11.3.0 through 11.5.1, Analytics 11.0.0… Affected: 4.0.0; 4.1.0; 4.2.0; 4.3.0; 4.4.0 |
| CVE-2014-2927 | – | Oct 15 | The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before HF7, 11.3.0 before HF9, and 11.2.1 before HF11 and… Affected: 4.0.0; 4.1.0; 4.2.0; 4.3.0 |
| CVE-2014-4027 | – | Jun 23 | The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local… Affected: 4.0.0 through 4.5.0 |
| CVE-2014-0101 | – | Mar 11 | The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an… Affected: 4.0.0 through 4.5.0 |
Showing 18