4.9

CVE-2016-1497

The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x before 11.6.1, and 12.0.0 before HF1 allows remote administrators to read Access Policy Manager (APM) access logs via unspecified vectors.

Data is provided by the National Vulnerability Database (NVD)
F5Big-ip Webaccelerator Version11.0.0
F5Big-ip Webaccelerator Version11.1.0
F5Big-ip Webaccelerator Version11.2.0
F5Big-ip Webaccelerator Version11.2.1
F5Big-ip Webaccelerator Version11.3.0
F5Big-ip Link Controller Version11.0.0
F5Big-ip Link Controller Version11.1.0
F5Big-ip Link Controller Version11.2.0
F5Big-ip Link Controller Version11.2.1
F5Big-ip Link Controller Version11.3.0
F5Big-ip Link Controller Version11.4.0
F5Big-ip Link Controller Version11.4.1
F5Big-ip Link Controller Version11.5.0
F5Big-ip Link Controller Version11.5.1
F5Big-ip Link Controller Version11.5.2
F5Big-ip Link Controller Version11.5.3
F5Big-ip Link Controller Version11.5.4
F5Big-ip Link Controller Version11.6.0
F5Big-ip Link Controller Version12.0.0
F5Big-ip Access Policy Manager Version11.0.0
F5Big-ip Access Policy Manager Version11.1.0
F5Big-ip Access Policy Manager Version11.2.0
F5Big-ip Access Policy Manager Version11.2.1
F5Big-ip Access Policy Manager Version11.3.0
F5Big-ip Access Policy Manager Version11.4.0
F5Big-ip Access Policy Manager Version11.4.1
F5Big-ip Access Policy Manager Version11.5.0
F5Big-ip Access Policy Manager Version11.5.1
F5Big-ip Access Policy Manager Version11.5.2
F5Big-ip Access Policy Manager Version11.5.3
F5Big-ip Access Policy Manager Version11.5.4
F5Big-ip Access Policy Manager Version11.6.0
F5Big-ip Access Policy Manager Version12.0.0
F5Big-ip Domain Name System Version12.0.0
F5Big-ip Global Traffic Manager Version11.0.0
F5Big-ip Global Traffic Manager Version11.1.0
F5Big-ip Global Traffic Manager Version11.2.0
F5Big-ip Global Traffic Manager Version11.2.1
F5Big-ip Global Traffic Manager Version11.3.0
F5Big-ip Global Traffic Manager Version11.4.0
F5Big-ip Global Traffic Manager Version11.4.1
F5Big-ip Global Traffic Manager Version11.5.0
F5Big-ip Global Traffic Manager Version11.5.1
F5Big-ip Global Traffic Manager Version11.5.2
F5Big-ip Global Traffic Manager Version11.5.3
F5Big-ip Global Traffic Manager Version11.5.4
F5Big-ip Global Traffic Manager Version11.6.0
F5Big-ip Local Traffic Manager Version11.0.0
F5Big-ip Local Traffic Manager Version11.1.0
F5Big-ip Local Traffic Manager Version11.2.0
F5Big-ip Local Traffic Manager Version11.2.1
F5Big-ip Local Traffic Manager Version11.3.0
F5Big-ip Local Traffic Manager Version11.4.0
F5Big-ip Local Traffic Manager Version11.4.1
F5Big-ip Local Traffic Manager Version11.5.0
F5Big-ip Local Traffic Manager Version11.5.1
F5Big-ip Local Traffic Manager Version11.5.2
F5Big-ip Local Traffic Manager Version11.5.3
F5Big-ip Local Traffic Manager Version11.5.4
F5Big-ip Local Traffic Manager Version11.6.0
F5Big-ip Local Traffic Manager Version12.0.0
F5Big-ip Analytics Version11.0.0
F5Big-ip Analytics Version11.1.0
F5Big-ip Analytics Version11.2.0
F5Big-ip Analytics Version11.2.1
F5Big-ip Analytics Version11.3.0
F5Big-ip Analytics Version11.4.0
F5Big-ip Analytics Version11.4.1
F5Big-ip Analytics Version11.5.0
F5Big-ip Analytics Version11.5.1
F5Big-ip Analytics Version11.5.2
F5Big-ip Analytics Version11.5.3
F5Big-ip Analytics Version11.5.4
F5Big-ip Analytics Version11.6.0
F5Big-ip Analytics Version12.0.0
F5Big-ip Edge Gateway Version11.0.0
F5Big-ip Edge Gateway Version11.1.0
F5Big-ip Edge Gateway Version11.2.0
F5Big-ip Edge Gateway Version11.2.1
F5Big-ip Edge Gateway Version11.3.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.23% 0.462
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.9 1.2 3.6
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.