F5

Big-ip Edge Gateway

287 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.9

CVE-2018-5501

  • EPSS 1.36%
  • Veröffentlicht 01.03.2018 16:29:00
  • Zuletzt bearbeitet 21.11.2024 04:08:55

In some circumstances, on F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, any 11.6.x or 11.5.x release, or 11.2.1, TCP DNS profile allows excessive buffering due to lack of flow control.

7.8

CVE-2017-6151

  • EPSS 1.64%
  • Veröffentlicht 21.12.2017 17:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, undisclosed requests made to BIG-IP virtual servers which make use of the "HTTP/2 profile" may result i...

8.1

CVE-2017-6164

  • EPSS 3.94%
  • Veröffentlicht 21.12.2017 17:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, 12.0.0 - 12.1.2, 11.6.0 - 11.6.1 and 11.5.0 - 11.5.4, in some circumstances, Traffic Management Microke...

5.3

CVE-2017-6161

  • EPSS 0.97%
  • Veröffentlicht 27.10.2017 14:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1, when ConfigSync is configured, attackers on adjacent networks ma...

5.4

CVE-2016-7469

  • EPSS 0.95%
  • Veröffentlicht 09.06.2017 15:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WOM and WebSafe version 12.0.0 - 1...

4.9

CVE-2014-6031

  • EPSS 1.07%
  • Veröffentlicht 08.06.2017 16:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.x before 11.4.1 HF9, 11.5.x before 11.5.2 HF1, and 11.6.0 before HF4, and Enterprise Manager 2.1.0 through 2.3.0 and 3.x before 3.1...

7.5

CVE-2016-9250

  • EPSS 0.9%
  • Veröffentlicht 10.05.2017 14:29:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

In F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user with access to the control plane may be able to delete arbitrary files through an undisclosed mechanism.

7.5

CVE-2017-6128

  • EPSS 1.4%
  • Veröffentlicht 01.05.2017 15:59:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

An attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in F5 BIG-IP, Enterprise Manager, BIG-IQ, and iWorkflow.

7.5

CVE-2016-9252

  • EPSS 1.78%
  • Veröffentlicht 27.03.2017 18:59:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

The Traffic Management Microkernel (TMM) in F5 BIG-IP before 11.5.4 HF3, 11.6.x before 11.6.1 HF2 and 12.x before 12.1.2 does not properly handle minimum path MTU options for IPv6, which allows remote attackers to cause a denial-of-service (DoS) thro...

5.5

CVE-2016-7474

  • EPSS 0.36%
  • Veröffentlicht 27.03.2017 15:59:00
  • Zuletzt bearbeitet 13.05.2026 00:24:29

In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain normally unrecoverable information.