Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

f5 big-ip domain name system 12.0.0 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2015-8611
BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, and PEM 12.0.0 before HF1 on the 2000, 4000, 5000, 7000, and 10000 platforms do not properly sync passwords with the Always-On Management (AOM) subsystem, which might allow remote malicious users to obtain login acc...
F5 Big-ip Domain Name System 12.0.0F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Link Controller 12.0.0F5 Big-ip Policy Enforcement Manager 12.0.0F5 Big-ip Advanced Firewall Manager 12.0.0F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Access Policy Manager 12.0.0F5 Big-ip Application Security Manager 12.0.0F5 Big-ip Analytics 12.0.0
7.8
CVSSv2
CVE-2016-9249
An undisclosed traffic pattern received by a BIG-IP Virtual Server with TCP Fast Open enabled may cause the Traffic Management Microkernel (TMM) to restart, resulting in a Denial-of-Service (DoS).
F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Application Acceleration Manager 12.1.1F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Advanced Firewall Manager 12.1.1F5 Big-ip Advanced Firewall Manager 12.0.0F5 Big-ip Advanced Firewall Manager 12.1.0F5 Big-ip Analytics 12.1.1F5 Big-ip Analytics 12.0.0F5 Big-ip Analytics 12.1.0F5 Big-ip Access Policy Manager 12.1.1F5 Big-ip Access Policy Manager 12.0.0F5 Big-ip Access Policy Manager 12.1.0F5 Big-ip Application Security Manager 12.1.1F5 Big-ip Application Security Manager 12.0.0F5 Big-ip Application Security Manager 12.1.0F5 Big-ip Domain Name System 12.1.1F5 Big-ip Domain Name System 12.0.0F5 Big-ip Domain Name System 12.1.0F5 Big-ip Link Controller 12.1.1
6.5
CVSSv2
CVE-2019-6646
On BIG-IP 11.5.2-11.6.4 and Enterprise Manager 3.1.1, REST users with guest privileges may be able to escalate their privileges and run commands with admin privileges.
F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Advanced Firewall Manager 12.0.0F5 Big-ip Analytics 12.0.0F5 Big-ip Domain Name SystemF5 Big-ip Edge GatewayF5 Big-ip Link Controller 12.0.0F5 Big-ip Policy Enforcement Manager 12.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 12.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 12.0.0F5 Big-ip WebacceleratorF5 Big-ip Webaccelerator 12.0.0F5 Enterprise Manager 3.1.1F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Fraud Protection Service 12.0.0F5 Big-ip Global Traffic ManagerF5 Big-ip Global Traffic Manager 12.0.0F5 Big-ip Advanced Firewall Manager
7.5
CVSSv2
CVE-2017-6131
In some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may contain a default administrative password which could be used to remotely log into the BIG-IP system. The impacted administrative account is the Azure instance administrative user tha...
F5 Big-ip Local Traffic Manager 13.0.0F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Local Traffic Manager 12.1.2F5 Big-ip Application Acceleration Manager 12.1.2F5 Big-ip Application Acceleration Manager 13.0.0F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Application Acceleration Manager 12.1.1F5 Big-ip Advanced Firewall Manager 13.0.0F5 Big-ip Advanced Firewall Manager 12.0.0F5 Big-ip Advanced Firewall Manager 12.1.0F5 Big-ip Advanced Firewall Manager 12.1.1F5 Big-ip Advanced Firewall Manager 12.1.2F5 Big-ip Access Policy Manager 12.0.0F5 Big-ip Access Policy Manager 12.1.0F5 Big-ip Access Policy Manager 12.1.1F5 Big-ip Access Policy Manager 12.1.2F5 Big-ip Access Policy Manager 13.0.0F5 Big-ip Application Security Manager 12.1.1F5 Big-ip Application Security Manager 12.1.2
6.5
CVSSv2
CVE-2016-9251
In F5 BIG-IP 12.0.0 up to and including 12.1.2, an authenticated attacker may be able to cause an escalation of privileges through a crafted iControl REST connection.
F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Local Traffic Manager 12.1.2F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 12.1.1F5 Big-ip Application Acceleration Manager 12.1.2F5 Big-ip Advanced Firewall Manager 12.1.2F5 Big-ip Advanced Firewall Manager 12.0.0F5 Big-ip Advanced Firewall Manager 12.1.1F5 Big-ip Advanced Firewall Manager 12.1.0F5 Big-ip Analytics 12.1.2F5 Big-ip Analytics 12.1.1F5 Big-ip Analytics 12.1.0F5 Big-ip Analytics 12.0.0F5 Big-ip Access Policy Manager 12.1.1F5 Big-ip Access Policy Manager 12.1.0F5 Big-ip Access Policy Manager 12.1.2F5 Big-ip Access Policy Manager 12.0.0F5 Big-ip Application Security Manager 12.1.0F5 Big-ip Application Security Manager 12.1.1
6
CVSSv2
CVE-2016-9256
In F5 BIG-IP 12.1.0 up to and including 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the role_map is not reloaded between the time the permissions are changed and the time of the user's next request. This is a race cond...
F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 12.1.2F5 Big-ip Application Acceleration Manager 12.1.1F5 Big-ip Application Acceleration Manager 12.1.2F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Advanced Firewall Manager 12.1.2F5 Big-ip Advanced Firewall Manager 12.0.0F5 Big-ip Advanced Firewall Manager 12.1.0F5 Big-ip Advanced Firewall Manager 12.1.1F5 Big-ip Analytics 12.1.1F5 Big-ip Analytics 12.0.0F5 Big-ip Analytics 12.1.2F5 Big-ip Analytics 12.1.0F5 Big-ip Access Policy Manager 12.1.1F5 Big-ip Access Policy Manager 12.1.2F5 Big-ip Access Policy Manager 12.1.0F5 Big-ip Access Policy Manager 12.0.0F5 Big-ip Application Security Manager 12.1.0F5 Big-ip Application Security Manager 12.1.1
4.3
CVSSv2
CVE-2017-6137
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 up to and including 12.1.2, undisclosed traffic patterns received while software SYN cookie protection is...
F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Local Traffic Manager 12.1.2F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Application Acceleration Manager 12.1.2F5 Big-ip Application Acceleration Manager 11.6.1F5 Big-ip Application Acceleration Manager 12.1.1F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Advanced Firewall Manager 12.1.1F5 Big-ip Advanced Firewall Manager 12.1.2F5 Big-ip Advanced Firewall Manager 11.6.1F5 Big-ip Advanced Firewall Manager 12.0.0F5 Big-ip Advanced Firewall Manager 12.1.0F5 Big-ip Analytics 12.0.0F5 Big-ip Analytics 12.1.0F5 Big-ip Analytics 12.1.1F5 Big-ip Analytics 12.1.2F5 Big-ip Analytics 11.6.1F5 Big-ip Access Policy Manager 12.1.1F5 Big-ip Access Policy Manager 12.1.2
2.9
CVSSv2
CVE-2017-6161
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1, when ConfigSync is configured, attackers on adjacent networks may be able to bypass the TLS pr...
F5 Big-ip Local Traffic Manager 11.2.1F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Local Traffic Manager 12.1.2F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Application Acceleration Manager 11.2.1F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 11.6.0F5 Big-ip Application Acceleration Manager 11.6.1F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Application Acceleration Manager 12.1.2F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 12.1.1F5 Big-ip Advanced Firewall Manager 12.1.2F5 Big-ip Advanced Firewall Manager 11.2.1F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 11.6.0F5 Big-ip Advanced Firewall Manager 11.6.1F5 Big-ip Advanced Firewall Manager 12.1.0
7.5
CVSSv2
CVE-2017-6145
iControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 up to and including 12.1.2 and 13.0.0 includes a service to convert authorization BIGIPAuthCookie cookies to X-F5-Auth-Token tokens. This service does not properly re-vali...
F5 Big-ip Application Security Manager 13.0.0F5 Big-ip Local Traffic Manager 13.0.0F5 Big-ip Policy Enforcement Manager 13.0.0F5 Big-ip Application Acceleration Manager 13.0.0F5 Big-ip Link Controller 13.0.0F5 Big-ip Domain Name System 13.0.0F5 Big-ip Analytics 12.1.2F5 Big-ip Link Controller 12.1.1F5 Big-ip Policy Enforcement Manager 12.1.2F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Application Acceleration Manager 12.1.2F5 Big-ip Websafe 13.0.0F5 Big-ip Websafe 12.1.0F5 Big-ip Websafe 12.1.1F5 Big-ip Websafe 12.1.2F5 Big-ip Policy Enforcement Manager 12.1.0F5 Big-ip Advanced Firewall Manager 12.1.1F5 Big-ip Advanced Firewall Manager 12.1.2F5 Big-ip Access Policy Manager 12.1.2F5 Big-ip Access Policy Manager 12.1.1F5 Big-ip Access Policy Manager 12.1.0
4.3
CVSSv2
CVE-2018-5522
On F5 BIG-IP 13.0.0, 12.0.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, when processing DIAMETER transactions with carefully crafted attribute-value pairs, TMM may crash.
F5 Big-ip Application Acceleration Manager 11.2.1F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 13.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 11.2.1F5 Big-ip Local Traffic Manager 13.0.0F5 Big-ip Advanced Firewall Manager 13.0.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 11.2.1F5 Big-ip Analytics 11.2.1F5 Big-ip AnalyticsF5 Big-ip Analytics 13.0.0F5 Big-ip Access Policy Manager 13.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 11.2.1F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 11.2.1F5 Big-ip Application Security Manager 13.0.0F5 Big-ip Domain Name System 11.2.1F5 Big-ip Domain Name SystemF5 Big-ip Domain Name System 13.0.0F5 Big-ip Edge Gateway 13.0.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook