F5

Ssl Orchestrator

27 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2021-23004

  • EPSS 0.65%
  • Published 31.03.2021 18:15:15
  • Last modified 21.11.2024 05:51:08

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, Multipath TCP (MPTCP) forwarding flows may be created on standard virtual servers wit...

7.5

CVE-2021-23003

  • EPSS 0.65%
  • Published 31.03.2021 18:15:15
  • Last modified 21.11.2024 05:51:07

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, the Traffic Management Microkernel (TMM) process may produce a core file when undiscl...

4.3

CVE-2021-23001

  • EPSS 0.25%
  • Published 31.03.2021 18:15:15
  • Last modified 21.11.2024 05:51:07

On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, the upload functionality in BIG-IP Advanced WAF and BIG-IP ASM allows an authenticated user ...

7.5

CVE-2021-23000

  • EPSS 0.65%
  • Published 31.03.2021 18:15:15
  • Last modified 21.11.2024 05:51:07

On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2, if the tmm.http.rfc.enforcement BigDB key is enabled in a BIG-IP system, or the Bad host header value is checked in the AFM HTTP security profile associated with a virtual server, in rare instances, ...

7.5

CVE-2021-22999

  • EPSS 0.65%
  • Published 31.03.2021 18:15:15
  • Last modified 21.11.2024 05:51:07

On versions 15.0.x before 15.1.0 and 14.1.x before 14.1.4, the BIG-IP system provides an option to connect HTTP/2 clients to HTTP/1.x servers. When a client is slow to accept responses and it closes a connection prematurely, the BIG-IP system may ind...

5.3

CVE-2021-22998

  • EPSS 0.63%
  • Published 31.03.2021 18:15:15
  • Last modified 21.11.2024 05:51:05

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, SYN flood protection thresholds are not enforced in secure network address translatio...

6.1

CVE-2021-22994

  • EPSS 0.32%
  • Published 31.03.2021 18:15:14
  • Last modified 21.11.2024 05:51:05

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could ...

9.8

CVE-2021-22991

Warning
  • EPSS 70.78%
  • Published 31.03.2021 18:15:14
  • Last modified 02.04.2025 19:09:27

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, undisclosed requests to a virtual server may be incorrectly handled by the Traffic Management Microkernel (TM...

9.8

CVE-2021-22992

  • EPSS 7.78%
  • Published 31.03.2021 17:15:13
  • Last modified 21.11.2024 05:51:05

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, a malicious HTTP response to an Advanced WAF/BIG-IP ASM virtual server with Login Pag...

9

CVE-2021-22990

  • EPSS 1.84%
  • Published 31.03.2021 17:15:12
  • Last modified 21.11.2024 05:51:04

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, on systems with Advanced WAF or BIG-IP ASM provisioned, the Traffic Management User I...