F5

Big-ip Policy Enforcement Manager

452 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2020-5931

  • EPSS 0.89%
  • Published 29.10.2020 16:15:15
  • Last modified 21.11.2024 05:34:51

On BIG-IP 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, Virtual servers with a OneConnect profile may incorrectly handle WebSockets related HTTP response headers, causing TMM to restart.

7.8

CVE-2020-5933

  • EPSS 0.61%
  • Published 29.10.2020 16:15:15
  • Last modified 21.11.2024 05:34:51

On versions 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, when a BIG-IP system that has a virtual server configured with an HTTP compression profile processes compressed HTTP message payloads that require de...

5.9

CVE-2020-5935

  • EPSS 0.65%
  • Published 29.10.2020 16:15:15
  • Last modified 21.11.2024 05:34:51

On BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, FPS, GTM, Link Controller, PEM) versions 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when handling MQTT traffic through a BIG-IP virtual server associated with an MQTT profile and an iRul...

6.5

CVE-2020-5938

  • EPSS 0.13%
  • Published 29.10.2020 14:15:12
  • Last modified 21.11.2024 05:34:51

On BIG-IP 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when negotiating IPSec tunnels with configured, authenticated peers, the peer may negotiate a different key length than the BIG-IP configuration would otherwise allow.

7.5

CVE-2020-5930

  • EPSS 0.86%
  • Published 25.09.2020 14:15:14
  • Last modified 21.11.2024 05:34:50

In BIG-IP 15.0.0-15.1.0.4, 14.1.0-14.1.2.7, 13.1.0-13.1.3.3, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2 and BIG-IQ 5.2.0-7.1.0, unauthenticated attackers can cause disruption of service via undisclosed methods.

5.9

CVE-2020-5929

  • EPSS 0.67%
  • Published 25.09.2020 14:15:13
  • Last modified 21.11.2024 05:34:50

In versions 13.0.0-13.0.0 HF2, 12.1.0-12.1.2 HF1, and 11.6.1-11.6.2, BIG-IP platforms with Cavium Nitrox SSL hardware acceleration cards, a Virtual Server configured with a Client SSL profile, and using Anonymous (ADH) or Ephemeral (DHE) Diffie-Hellm...

7.5

CVE-2020-5921

  • EPSS 0.65%
  • Published 26.08.2020 16:15:12
  • Last modified 21.11.2024 05:34:49

in BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, Syn flood causes large number of MCPD context messages destined to secondary blades consuming memory leading to MCPD failure....

7.5

CVE-2020-5925

  • EPSS 0.65%
  • Published 26.08.2020 16:15:12
  • Last modified 21.11.2024 05:34:50

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, undisclosed internally generated UDP traffic may cause the Traffic Management Microkernel (TMM) to restart under some circums...

7.5

CVE-2020-5926

  • EPSS 0.83%
  • Published 26.08.2020 16:15:12
  • Last modified 21.11.2024 05:34:50

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, a BIG-IP virtual server with a Session Initiation Protocol (SIP) ALG profile, parsing SIP messages that contain a multi-part MIME payload with certain boundary strings can caus...

7.4

CVE-2020-5913

  • EPSS 0.19%
  • Published 26.08.2020 15:15:13
  • Last modified 21.11.2024 05:34:49

In versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, the BIG-IP Client or Server SSL profile ignores revoked certificates, even when a valid CRL is present. This impacts SSL/TLS connections and may resu...