F5
Product
F5OS-A
17
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 10Low 0
Watch
Add F5OS-A to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-57780 | 8.8 | Oct 15 | A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to escalate their privileges. A successful exploit may allow the… Affected: 1.5.1 before 1.5.4; 1.8.0 |
| CVE-2025-61955 | 8.8 | Oct 15 | A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to escalate their privileges. A successful exploit may allow the… Affected: 1.5.1 before 1.5.4; 1.8.0 |
| CVE-2025-46265 | 8.8 | May 7 | On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege F5OS roles. Note:… Affected: 1.5.1 |
| CVE-2022-41835 | 8.8 | Oct 19 | F5OS vulnerability CVE-2022-41835 Affected: 1.x before 1.1.0 |
| CVE-2025-36546 | 8.1 | May 7 | On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode; access via SSH key-based… Affected: 1.5.1 before 1.5.3 |
| CVE-2023-22657 | 7.8 | Feb 1 | On F5OS-A beginning in version 1.2.0 to before 1.3.0 and F5OS-C beginning in version 1.3.0 to before 1.5.0, processing F5OS tenant file names may allow for command injection Affected: 1.2.0 before 1.3.0 |
| CVE-2002-20001 | 7.5 | Nov 11 | The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive… Affected: 1.3.0 through 1.3.2; 1.5.0 through 1.5.3; 1.8.0 |
| CVE-2025-47150 | 6.5 | Oct 15 | When SNMP is configured on F5OS Appliance and Chassis systems, undisclosed requests can cause an increase in SNMP memory resource utilization. Note: Software versions which have… Affected: 1.5.1 before 1.5.3; 1.8.0 before 1.8.3 |
| CVE-2025-43878 | 6.0 | May 7 | When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing… Affected: 1.5.1 before 1.8.0 |
| CVE-2025-60015 | 5.7 | Oct 15 | An out-of-bounds write vulnerability exists in F5OS-A and F5OS-C that could lead to memory corruption. Note: Software versions which have reached End of Technical Support… Affected: 1.5.1 before 1.5.4; 1.8.0 |
| CVE-2024-24966 | 5.5 | Feb 14 | When LDAP remote authentication is configured on F5OS, a remote user without an assigned role will be incorrectly authorized. Note: Software versions which have reached End of… Affected: 1.2.0 |
| CVE-2024-23607 | 5.5 | Feb 14 | A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read files outside the QKView directory. Note: Software versions… Affected: 1.3.0 before 1.4.0 |
| CVE-2022-41780 | 5.5 | Oct 19 | F5OS CLI vulnerability CVE-2022-41780 Affected: 1.x before 1.1.0 |
| CVE-2022-25990 | 5.3 | May 5 | On 1.0.x versions prior to 1.0.1, systems running F5OS-A software may expose certain registry ports externally Affected: 1.0.0 |
| CVE-2025-60013 | 4.6 | Oct 15 | When a highly-privileged, authenticated attacker attempts to initialize the rSeries FIPS module using a password with special shell metacharacters, arbitrary system commands may… Affected: 1.5.1 before 1.5.4; 1.8.0 |
| CVE-2023-36494 | 4.4 | Aug 2 | Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Affected: 1.4.0 |
| CVE-2025-53860 | 4.1 | Oct 15 | A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker to access sensitive FIPS hardware security module (HSM) information on F5 rSeries… Affected: 1.5.1 before 1.5.3; 1.8.0 |
Showing 17