F5

Big-ip Ssl Orchestrator

107 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2021-23045

  • EPSS 0.65%
  • Veröffentlicht 14.09.2021 17:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:12

On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when an SCTP profile with multiple paths is configured on a virtual server, undisclosed requests can cause t...

7.5

CVE-2021-23042

  • EPSS 0.65%
  • Veröffentlicht 14.09.2021 15:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:12

On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, and 12.1.x before 12.1.6, when an HTTP profile is configured on a virtual server, undisclosed requests can cause a significant increase in sys...

7.5

CVE-2021-23009

  • EPSS 0.65%
  • Veröffentlicht 10.05.2021 15:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:08

On BIG-IP version 16.0.x before 16.0.1.1 and 15.1.x before 15.1.3, malformed HTTP/2 requests may cause an infinite loop which causes a Denial of Service for Data Plane traffic. TMM takes the configured HA action when the TMM process is aborted. There...

8.2

CVE-2021-23012

  • EPSS 0.19%
  • Veröffentlicht 10.05.2021 15:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:08

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, and 13.1.x before 13.1.4, lack of input validation for items used in the system support functionality may allow users granted either "Resource Administrator" or "A...

7.2

CVE-2021-23015

  • EPSS 0.08%
  • Veröffentlicht 10.05.2021 15:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:09

On BIG-IP 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.0.8 through 13.1.3.6, and all versions of 16.0.x, when running in Appliance Mode, an authenticated user assigned the 'Administrator' role may be able to bypass Appliance Mode restrictions u...

7.5

CVE-2021-23011

  • EPSS 0.65%
  • Veröffentlicht 10.05.2021 14:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:08

On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, when the BIG-IP system is buffering packet fragments for reassembly, the Traffic Management Microk...

7.5

CVE-2021-23013

  • EPSS 0.8%
  • Veröffentlicht 10.05.2021 14:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:09

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, the Traffic Management Microkernel (TMM) may stop responding when processing Stream Control Transmission Protoc...

5.3

CVE-2021-23007

Exploit
  • EPSS 0.73%
  • Veröffentlicht 31.03.2021 18:15:15
  • Zuletzt bearbeitet 21.11.2024 05:51:08

On BIG-IP versions 14.1.4 and 16.0.1.1, when the Traffic Management Microkernel (TMM) process handles certain undisclosed traffic, it may start dropping all fragmented IP traffic. Note: Software versions which have reached End of Software Development...

7.5

CVE-2021-22977

  • EPSS 0.65%
  • Veröffentlicht 12.02.2021 20:15:13
  • Zuletzt bearbeitet 21.11.2024 05:51:03

On BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3, cooperation between malicious HTTP client code and a malicious server may cause TMM to restart and generate a core file. Note: Software versions which have reached End of Software Development (EoSD...

8.3

CVE-2021-22978

  • EPSS 0.82%
  • Veröffentlicht 12.02.2021 20:15:13
  • Zuletzt bearbeitet 21.11.2024 05:51:03

On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12.1.x and 11.6.x versions, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete ...