F5

Big-iq Adc

7 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2014-5209

  • EPSS 0.53%
  • Published 08.01.2020 01:15:09
  • Last modified 21.11.2024 02:11:37

An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.

9

CVE-2015-3628

Exploit
  • EPSS 76.24%
  • Published 07.12.2015 20:59:04
  • Last modified 12.04.2025 10:46:40

The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0 before 11.5.3 HF2 and 11.6.0 before 11.6.0 HF6, BIG-IP AAM 11.4.0 before 11.5.3 HF2 and 11.6.0 before 11.6.0 HF6, BIG-IP Edge Gateway, WebAccelerator, and WO...

9

CVE-2015-7394

  • EPSS 0.98%
  • Published 06.11.2015 18:59:03
  • Last modified 12.04.2025 10:46:40

The datastor kernel module in F5 BIG-IP Analytics, APM, ASM, Link Controller, and LTM 11.1.0 before 12.0.0, BIG-IP AAM 11.4.0 before 12.0.0, BIG-IP AFM, PEM 11.3.0 before 12.0.0, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.1.0 through 11.3.0, BIG...

7.8

CVE-2015-5058

  • EPSS 0.82%
  • Published 24.08.2015 14:59:05
  • Last modified 12.04.2025 10:46:40

Memory leak in the virtual server component in F5 Big-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.5.x before 11.5.1 HF10, 11.5.3 before HF1, and 11.6.0 before HF5, BIG-IQ Cloud, Device, and Security 4.4.0 through 4.5.0, an...

4.3

CVE-2015-4637

  • EPSS 0.38%
  • Published 16.07.2015 14:59:04
  • Last modified 12.04.2025 10:46:40

The REST API in F5 BIG-IQ Cloud, Device, and Security 4.4.0 and 4.5.0 before HF2 and ADC 4.5.0 before HF2, when configured for LDAP remote authentication and the LDAP server allows anonymous BIND operations, allows remote attackers to obtain an authe...

7.8

CVE-2015-4047

Exploit
  • EPSS 3.59%
  • Published 29.05.2015 15:59:19
  • Last modified 12.04.2025 10:46:40

racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.

7.8

CVE-2014-0101

  • EPSS 3.09%
  • Published 11.03.2014 13:01:06
  • Last modified 12.04.2025 10:46:40

The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which allows remote attackers to cause a denial of...