FN
Vendor
F5 Networks, Inc.
16
CVEs
0
On KEV
0
New 30D
Products
BL9.1
BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator)
F5 Networks, Inc.
5 CVEs0 on KEV0 new
BA7.5
BIG-IP (APM)
F5 Networks, Inc.
3 CVEs0 on KEV0 new
BA5.5
BIG-IP (AAM)
F5 Networks, Inc.
1 CVEs0 on KEV0 new
BA7.8
BIG-IP APM client for Linux
F5 Networks, Inc.
1 CVEs0 on KEV0 new
BA7.8
BIG-IP APM client for macOS
F5 Networks, Inc.
1 CVEs0 on KEV0 new
BA7.8
BIG-IP APM client for Windows
F5 Networks, Inc.
1 CVEs0 on KEV0 new
BA6.1
BIG-IP APM; Enterprise Manager
F5 Networks, Inc.
1 CVEs0 on KEV0 new
BL5.9
BIG-IP (LTM)
F5 Networks, Inc.
1 CVEs0 on KEV0 new
BL7.2
BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator); Enterprise Manager
F5 Networks, Inc.
1 CVEs0 on KEV0 new
BL4.3
BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe); Enterprise Manager
F5 Networks, Inc.
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2019-6600 | BL BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) F5 Networks, Inc. | 6.1 | Mar 13 | In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when remote authentication is enabled for administrative users and all external… |
| CVE-2019-6597 | BL BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator); Enterprise Manager F5 Networks, Inc. | 7.2 | Mar 13 | In BIG-IP 13.0.0-13.1.1.1, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic… |
| CVE-2019-6599 | BA BIG-IP APM; Enterprise Manager F5 Networks, Inc. | 6.1 | Mar 13 | In BIG-IP 11.6.1-11.6.3.2 or 11.5.1-11.5.8, or Enterprise Manager 3.1.1, improper escaping of values in an undisclosed page of the configuration utility may result with an… |
| CVE-2019-6596 | BA BIG-IP (APM) F5 Networks, Inc. | 7.5 | Mar 13 | In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, 12.1.0-12.1.3.6, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when processing fragmented ClientHello messages in a DTLS session TMM may corrupt… |
| CVE-2019-6598 | BL BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe); Enterprise Manager F5 Networks, Inc. | 4.3 | Mar 13 | In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise Manager 3.1.1, malformed requests to the Traffic Management User… |
| CVE-2019-6601 | BA BIG-IP (AAM) F5 Networks, Inc. | 5.5 | Mar 13 | In BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application Acceleration Manager (AAM) wamd process used in processing of images and PDFs fails to drop… |
| CVE-2019-6594 | BL BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) F5 Networks, Inc. | 5.9 | Feb 26 | On BIG-IP 11.5.1-11.6.3.2, 12.1.3.4-12.1.3.7, 13.0.0 HF1-13.1.1.1, and 14.0.0-14.0.0.2, Multi-Path TCP (MPTCP) does not protect against multiple zero length DATA_FINs in the… |
| CVE-2019-6592 | BL BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) F5 Networks, Inc. | 9.1 | Feb 26 | On BIG-IP 14.1.0-14.1.0.1, TMM may restart and produce a core file when validating SSL certificates in client SSL or server SSL profiles |
| CVE-2019-6593 | BL BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) F5 Networks, Inc. | 5.9 | Feb 26 | On BIG-IP 11.5.1-11.5.4, 11.6.1, and 12.1.0, a virtual server configured with a Client SSL profile may be vulnerable to a chosen ciphertext attack against CBC ciphers |
| CVE-2019-6595 | BA BIG-IP (APM) F5 Networks, Inc. | 6.1 | Feb 26 | Cross-site scripting (XSS) vulnerability in F5 BIG-IP Access Policy Manager (APM) 11.5.x and 11.6.x Admin Web UI |
| CVE-2019-6589 | BL BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) F5 Networks, Inc. | 6.1 | Feb 14 | On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, and 11.6.0-11.6.3.2, a reflected Cross Site Scripting (XSS) vulnerability is present in an undisclosed page of the… |
| CVE-2019-6590 | BL BIG-IP (LTM) F5 Networks, Inc. | 5.9 | Feb 5 | On BIG-IP LTM 13.0.0 to 13.0.1 and 12.1.0 to 12.1.3.6, under certain conditions, the TMM may consume excessive resources when processing SSL Session ID Persistence traffic |
| CVE-2019-6591 | BA BIG-IP (APM) F5 Networks, Inc. | 5.4 | Feb 5 | On BIG-IP APM 14.0.0 to 14.0.0.4, 13.0.0 to 13.1.1.3 and 12.1.0 to 12.1.3.7, a reflected cross-site scripting (XSS) vulnerability exists in the resource information page for… |
| CVE-2018-5547 | BA BIG-IP APM client for Windows F5 Networks, Inc. | 7.8 | Aug 17 | Windows Logon Integration feature of F5 BIG-IP APM client prior to version 7.1.7.1 for Windows by default uses Legacy logon mode which uses a SYSTEM account to establish network… |
| CVE-2018-5546 | BA BIG-IP APM client for Linux F5 Networks, Inc. | 7.8 | Aug 17 | The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to… |