EM
Product
Enterprise Manager
On CISA KEVExploited in the wild
36
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 13Medium 12Low 0
Watch
Add Enterprise Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-14634 In wildKEV | 7.8 | Sep 25 | Linux Kernel Integer Overflow Vulnerability Affected: 3.1.1 |
| CVE-2014-0196 In wildKEV | 5.5 | May 7 | Linux Kernel Race Condition Vulnerability Affected: 3.1.0; 3.1.1 |
| CVE-2016-5022 | 9.8 | Sep 7 | F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1 HF1, and 12.x before 12.0.0 HF3;… Affected: 3.1.1 |
| CVE-2019-6665 | 9.4 | Nov 27 | On BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, an attacker with… Affected: 3.1.1 |
| CVE-2011-3188 | 9.1 | May 24 | The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes… Affected: 2.1.0 through 2.3.0; 3.0.0 |
| CVE-2019-6646 | 8.8 | Sep 4 | On BIG-IP 11.5.2-11.6.4 and Enterprise Manager 3.1.1, REST users with guest privileges may be able to escalate their privileges and run commands with admin privileges Affected: 3.1.1 |
| CVE-2019-6642 | 8.8 | Jul 1 | In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1,… Affected: 3.1.1 |
| CVE-2018-5743 | 7.5 | Oct 9 | By design, BIND is intended to limit the number of TCP clients that can be connected at any given time Affected: 3.1.1 |
| CVE-2018-14880 | 7.5 | Oct 3 | The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr() Affected: 3.1.1 |
| CVE-2018-14468 | 7.5 | Oct 3 | The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print() Affected: 3.1.1 |
| CVE-2019-11479 | 7.5 | Jun 19 | Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes Affected: 3.1.1 |
| CVE-2018-15328 | 7.5 | Dec 12 | On BIG-IP 14.0.x, 13.x, 12.x, and 11.x, Enterprise Manager 3.1.1, BIG-IQ 6.x, 5.x, and 4.x, and iWorkflow 2.x, the passphrases for SNMPv3 users and trap destinations that are used… Affected: 3.1.1 |
| CVE-2017-6128 | 7.5 | May 1 | An attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in F5 BIG-IP, Enterprise Manager, BIG-IQ, and iWorkflow Affected: 3.1.1 |
| CVE-2019-6597 | 7.2 | Mar 13 | In BIG-IP 13.0.0-13.1.1.1, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic… Affected: 3.1.1 |
| CVE-2018-15329 | 7.2 | Dec 20 | On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, or Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Management User… Affected: 3.1.1 |
| CVE-2018-15327 | 7.2 | Oct 31 | In BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1 or Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Management User Interface (TMUI),… Affected: 3.1.1 |
| CVE-2018-5523 | 7.2 | Jun 1 | On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 and Enterprise Manager 3.1.1, when authenticated administrative users run commands… Affected: 3.1.1 |
| CVE-2018-15322 | 6.5 | Oct 31 | On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 6.0.0-6.0.1, 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and… Affected: 3.1.1 |
| CVE-2020-5854 | 5.9 | Feb 6 | On BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.0-11.6.5.1, the tmm crashes under certain circumstances when using the… Affected: 3.1.1 |
| CVE-2019-6471 | 5.9 | Oct 9 | A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c Affected: 3.1.1 |
| CVE-2019-19151 | 5.5 | Dec 23 | On BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IQ versions 7.0.0, 6.0.0-6.1.0, and 5.0.0-5.4.0, iWorkflow version… Affected: 3.1.1 |
| CVE-2019-6663 | 5.5 | Nov 15 | The BIG-IP 15.0.0-15.0.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager… Affected: 3.1.1 |
| CVE-2016-7469 | 5.4 | Jun 9 | A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link… Affected: 3.1.1 |
| CVE-2014-5209 | 5.3 | Jan 8 | An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive… Affected: 3.1.1 |
| CVE-2019-6651 | 5.3 | Sep 25 | In BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.5.1-11.6.4, BIG-IQ 7.0.0, 6.0.0-6.1.0,5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager… Affected: 3.1.1 |
| CVE-2018-15321 | 4.9 | Oct 31 | When BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and… Affected: 3.1.1 |
| CVE-2018-5540 | 4.4 | Jul 19 | On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.1.0, BIG-IQ Cloud and Orchestration… Affected: 3.1.1 |
| CVE-2019-6598 | 4.3 | Mar 13 | In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise Manager 3.1.1, malformed requests to the Traffic Management User… Affected: 3.1.1 |
| CVE-2015-4040 | – | Sep 17 | Directory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and Enterprise Manager 3.0.0 through 3.1.1 allows remote authenticated users to access… Affected: 3.0.0; 3.1.0; 3.1.1 |
| CVE-2015-4047 | – | May 29 | racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests Affected: 3.0.0 through 3.1.1 |
| CVE-2014-6032 | – | Nov 1 | Multiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM, ASM, GTM, and Link Controller 11.0 through 11.6.0 and 10.0.0 through 10.2.4, AAM… Affected: 3.0.0; 3.1.0; 3.1.1 |
| CVE-2014-4023 | – | Oct 28 | Cross-site scripting (XSS) vulnerability in tmui/dashboard/echo.jsp in the Configuration utility in F5 BIG-IP LTM, APM, ASM, GTM, and Link Controller 11.0.0 before 11.6.0 and… Affected: 3.0.0; 3.1.0; 3.1.1 |
| CVE-2014-2927 | – | Oct 15 | The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before HF7, 11.3.0 before HF9, and 11.2.1 before HF11 and… Affected: 2.1.0; 2.2.0; 2.3.0; 3.0.0; 3.1.0; 3.1.1 |
| CVE-2014-4027 | – | Jun 23 | The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local… Affected: 3.0.0 through 3.1.1 |
| CVE-2014-3959 | – | Jun 3 | Cross-site scripting (XSS) vulnerability in list.jsp in the Configuration utility in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, GTM, and Link Controller 11.2.1 through 11.5.1, AAM… Affected: 3.0.0; 3.1.1 |
| CVE-2012-1493 | – | Jul 9 | F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manager before 2.1.0-HF2, 2.2.x before… Affected: 1.0; 2.0; 2.1.0; 2.1.0; 2.2.0; 2.3.0; +1 more |
Showing 36