F5

Big-ip Application Acceleration Manager

444 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2016-7474

  • EPSS 0.11%
  • Published 27.03.2017 15:59:00
  • Last modified 20.04.2025 01:37:25

In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain normally unrecoverable information.

5.9

CVE-2016-7468

  • EPSS 0.92%
  • Published 23.03.2017 14:59:00
  • Last modified 20.04.2025 01:37:25

An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic. This vulnerability affects virtual servers associated with TCP profiles when the BIG-IP system's tm.tcpp...

5.9

CVE-2016-9245

  • EPSS 0.66%
  • Published 07.03.2017 21:59:00
  • Last modified 20.04.2025 01:37:25

In F5 BIG-IP systems 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings. The issue is also exposed with the non-default ...

5.3

CVE-2016-6249

  • EPSS 0.06%
  • Published 20.02.2017 15:59:00
  • Last modified 20.04.2025 01:37:25

F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive attributes such as passwords in plaintext to /var/log/restjavad.0.log. It may allow local users to obtain sensitive information by r...

7.5

CVE-2016-9244

  • EPSS 73.65%
  • Published 09.02.2017 15:59:01
  • Last modified 20.04.2025 01:37:25

A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer (SSL...

7.8

CVE-2016-9249

  • EPSS 0.77%
  • Published 31.01.2017 15:59:00
  • Last modified 20.04.2025 01:37:25

An undisclosed traffic pattern received by a BIG-IP Virtual Server with TCP Fast Open enabled may cause the Traffic Management Microkernel (TMM) to restart, resulting in a Denial-of-Service (DoS).

5.9

CVE-2016-9247

  • EPSS 0.77%
  • Published 10.01.2017 16:59:00
  • Last modified 20.04.2025 01:37:25

Under certain conditions for BIG-IP systems using a virtual server with an associated FastL4 profile and TCP analytics profile, a specific sequence of packets may cause the Traffic Management Microkernel (TMM) to restart.

5.9

CVE-2016-5024

  • EPSS 1.34%
  • Published 03.01.2017 21:59:00
  • Last modified 12.04.2025 10:46:40

Virtual servers in F5 BIG-IP systems 11.6.1 before 11.6.1 HF1 and 12.1.x before 12.1.2, when configured to parse RADIUS messages via an iRule, allow remote attackers to cause a denial of service (Traffic Management Microkernel restart) via crafted ne...

9.8

CVE-2016-5700

  • EPSS 5.61%
  • Published 03.10.2016 16:09:13
  • Last modified 12.04.2025 10:46:40

Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2, when configured with the HTTP Explicit Proxy functionality or SOCKS pr...

7.5

CVE-2016-6876

  • EPSS 0.75%
  • Published 07.09.2016 19:28:17
  • Last modified 12.04.2025 10:46:40

The RESOLV::lookup iRule command in F5 BIG-IP LTM, APM, ASM, and Link Controller 10.2.1 through 10.2.4, 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.0.0 before HF3; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x before 11.5.4 HF2, ...