5.3

CVE-2018-5537

A remote attacker may be able to disrupt services on F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 if the TMM virtual server is configured with a HTML or a Rewrite profile. TMM may restart while processing some specially prepared HTML content from the back end.

Data is provided by the National Vulnerability Database (NVD)
F5 ≫ Big-ip Local Traffic Manager Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Local Traffic Manager Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Local Traffic Manager Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Local Traffic Manager Version >= 13.0.0 <= 13.1.0.5
F5 ≫ Big-ip Application Acceleration Manager Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Application Acceleration Manager Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Application Acceleration Manager Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Application Acceleration Manager Version >= 13.0.0 <= 13.1.0.5
F5 ≫ Big-ip Advanced Firewall Manager Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Advanced Firewall Manager Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Advanced Firewall Manager Version >= 12.1.0 <= 12.1.2
F5 ≫ Big-ip Advanced Firewall Manager Version >= 13.0.0 <= 13.1.0.5
F5 ≫ Big-ip Access Policy Manager Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Access Policy Manager Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Access Policy Manager Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Access Policy Manager Version >= 13.0.0 <= 13.1.0.5
F5 ≫ Big-ip Application Security Manager Version >= 10.1.0 <= 11.5.6
F5 ≫ Big-ip Application Security Manager Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Application Security Manager Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Application Security Manager Version >= 13.0.0 <= 13.1.0.5
F5 ≫ Big-ip Edge Gateway Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Edge Gateway Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Edge Gateway Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Edge Gateway Version >= 13.0.0 <= 13.1.0.5
F5 ≫ Big-ip Global Traffic Manager Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Global Traffic Manager Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Global Traffic Manager Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Global Traffic Manager Version >= 13.0.0 <= 13.1.0.5
F5 ≫ Big-ip Policy Enforcement Manager Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Policy Enforcement Manager Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Policy Enforcement Manager Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Policy Enforcement Manager Version >= 13.0.0 <= 13.1.0.5
F5 ≫ Big-ip Webaccelerator Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Webaccelerator Version >= 11.6.0 <= 11.6.3.1
F5 ≫ Big-ip Webaccelerator Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Webaccelerator Version >= 13.0.0 <= 13.1.0.5
F5 ≫ Big-ip Websafe Version >= 11.2.1 <= 11.5.6
F5 ≫ Big-ip Websafe Version >= 11.6.1 <= 11.6.3.1
F5 ≫ Big-ip Websafe Version >= 12.1.0 <= 12.1.3.5
F5 ≫ Big-ip Websafe Version >= 13.0.0 <= 13.1.0.5
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.69% 0.694
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.3 1.6 3.6
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H
nvd@nist.gov 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.