Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

f5 big-ip policy enforcement manager 11.4.0 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2017-6160
In F5 BIG-IP AAM and PEM software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.4.1 to 11.5.4, a remote attacker may create maliciously crafted HTTP request to cause Traffic Management Microkernel (TMM) to restart and temporarily fail to process traffic. This issue is exposed on...
F5 Big-ip Application Acceleration Manager 12.1.1F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Application Acceleration Manager 11.6.0F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Application Acceleration Manager 11.5.0F5 Big-ip Application Acceleration Manager 11.4.0F5 Big-ip Application Acceleration Manager 11.5.5F5 Big-ip Application Acceleration Manager 11.6.1F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Policy Enforcement Manager 11.4.0F5 Big-ip Policy Enforcement Manager 11.4.1F5 Big-ip Policy Enforcement Manager 12.1.0F5 Big-ip Policy Enforcement Manager 12.0.0F5 Big-ip Policy Enforcement Manager 11.6.0F5 Big-ip Policy Enforcement Manager 12.1.1F5 Big-ip Policy Enforcement Manager 11.5.4F5 Big-ip Policy Enforcement Manager 11.5.3F5 Big-ip Policy Enforcement Manager 11.5.2
4.3
CVSSv2
CVE-2016-7468
An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic. This vulnerability affects virtual servers associated with TCP profiles when the BIG-IP system's tm.tcpprogressive db variable va...
F5 Big-ip Local Traffic Manager 11.5.0F5 Big-ip Local Traffic Manager 11.5.1F5 Big-ip Local Traffic Manager 11.5.2F5 Big-ip Local Traffic Manager 11.5.4F5 Big-ip Local Traffic Manager 11.4.0F5 Big-ip Local Traffic Manager 11.4.1F5 Big-ip Local Traffic Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.5.0F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.4.0F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Advanced Firewall Manager 11.5.0F5 Big-ip Advanced Firewall Manager 11.5.1F5 Big-ip Advanced Firewall Manager 11.5.2F5 Big-ip Advanced Firewall Manager 11.5.3F5 Big-ip Advanced Firewall Manager 11.4.0F5 Big-ip Advanced Firewall Manager 11.4.1F5 Big-ip Advanced Firewall Manager 11.5.4F5 Big-ip Analytics 11.5.0
5
CVSSv2
CVE-2016-7476
The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, APM, ASM, GTM, Link Controller, PEM, PSM, and WebSafe 11.6.0 prior to 11.6.0 HF6, 11.5.0 prior to 11.5.3 HF2, and 11.3.0 prior to 11.4.1 HF10 may suffer from a memory leak while handling certain types of TCP tra...
F5 Big-ip Websafe 11.6.0F5 Big-ip Protocol Security Module 11.4.0F5 Big-ip Protocol Security Module 11.4.1F5 Big-ip Protocol Security Module 11.3.0F5 Big-ip Policy Enforcement Manager 11.4.0F5 Big-ip Policy Enforcement Manager 11.4.1F5 Big-ip Policy Enforcement Manager 11.5.2F5 Big-ip Policy Enforcement Manager 11.5.3F5 Big-ip Policy Enforcement Manager 11.3.0F5 Big-ip Policy Enforcement Manager 11.6.0F5 Big-ip Policy Enforcement Manager 11.5.0F5 Big-ip Policy Enforcement Manager 11.5.1F5 Big-ip Link Controller 11.3.0F5 Big-ip Link Controller 11.4.0F5 Big-ip Link Controller 11.5.1F5 Big-ip Link Controller 11.5.2F5 Big-ip Link Controller 11.5.3F5 Big-ip Link Controller 11.6.0F5 Big-ip Link Controller 11.4.1F5 Big-ip Link Controller 11.5.0F5 Big-ip Global Traffic Manager 11.3.0F5 Big-ip Global Traffic Manager 11.4.0
5
CVSSv2
CVE-2015-4638
The FastL4 virtual server in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.3.0 up to and including 11.5.2 and 11.6.0 up to and including 11.6.0 HF4, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.2.1 up to and including 11.3.0, and BIG-IP PSM 11....
F5 Big-ip Analytics 11.5.0F5 Big-ip Analytics 11.5.1F5 Big-ip Analytics 11.5.2F5 Big-ip Analytics 11.6.0F5 Big-ip Global Traffic Manager 11.5.0F5 Big-ip Global Traffic Manager 11.5.1F5 Big-ip Global Traffic Manager 11.5.2F5 Big-ip Global Traffic Manager 11.6.0F5 Big-ip Link Controller 11.3.0F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Policy Enforcement Manager 11.3.0F5 Big-ip Policy Enforcement Manager 11.4.0F5 Big-ip Policy Enforcement Manager 11.4.1F5 Big-ip Advanced Firewall Manager 11.6.0F5 Big-ip Analytics 11.4.0F5 Big-ip Application Security Manager 11.4.0F5 Big-ip Application Security Manager 11.5.0F5 Big-ip Edge Gateway 11.2.1F5 Big-ip Global Traffic Manager 11.4.0F5 Big-ip Link Controller 11.4.0F5 Big-ip Link Controller 11.5.0F5 Big-ip Local Traffic Manager 11.5.0
5
CVSSv2
CVE-2016-9244
A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer (SSL) session IDs from other sessi...
F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Local Traffic Manager 12.1.2F5 Big-ip Local Traffic Manager 11.5.2F5 Big-ip Local Traffic Manager 11.5.1F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 11.5.0F5 Big-ip Local Traffic Manager 11.4.1F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Local Traffic Manager 11.4.0F5 Big-ip Local Traffic Manager 11.5.4F5 Big-ip Local Traffic Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.6.1F5 Big-ip Application Acceleration Manager 11.4.0F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 12.1.1F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 11.5.0F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.5.3
5
CVSSv2
CVE-2016-5736
The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4.x, 11.5.x prior to 11.5.4 HF2, 11.6.x prior to 11.6.1, and 12.x prior to 12.0.0 HF2; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x prior to 11.5....
F5 Big-ip Application Acceleration Manager 11.6.0F5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Application Acceleration Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 11.5.0F5 Big-ip Application Acceleration Manager 11.4.0F5 Big-ip Webaccelerator 11.2.1F5 Big-ip Analytics 12.0.0F5 Big-ip Analytics 11.6.0F5 Big-ip Analytics 11.5.2F5 Big-ip Analytics 11.4.1F5 Big-ip Analytics 11.4.0F5 Big-ip Analytics 11.2.1F5 Big-ip Analytics 11.5.4F5 Big-ip Analytics 11.5.1F5 Big-ip Analytics 11.5.3F5 Big-ip Analytics 11.5.0F5 Big-ip Domain Name System 12.0.0F5 Big-ip Edge Gateway 11.2.1
4.3
CVSSv2
CVE-2014-9326
The automatic signature update functionality in the (1) Phone Home feature in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, GTM, and Link Controller 11.5.0 up to and including 11.6.0, ASM 10.0.0 up to and including 11.6.0, and PEM 11.3.0 up to and including 11.6.0 and the (2) Call Hom...
F5 Big-ip Application Acceleration Manager 11.5.0F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.6.0F5 Big-ip Policy Enforcement Manager 11.5.0F5 Big-ip Policy Enforcement Manager11.5.1F5 Big-ip Policy Enforcement Manager 11.5.2F5 Big-ip Policy Enforcement Manager 11.6.0F5 Big-ip Policy Enforcement Manager 11.3.0F5 Big-ip Policy Enforcement Manager 11.4.0F5 Big-ip Policy Enforcement Manager 11.4.1F5 Big-ip Global Traffic Manager 11.6.0F5 Big-ip Global Traffic Manager 11.5.0F5 Big-ip Global Traffic Manager 11.5.1F5 Big-ip Global Traffic Manager 11.5.2F5 Big-ip Advanced Firewall Manager 11.5.0F5 Big-ip Advanced Firewall Manager 11.5.1F5 Big-ip Advanced Firewall Manager 11.5.2F5 Big-ip Advanced Firewall Manager 11.6.0F5 Big-ip Local Traffic Manager 11.5.2F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Local Traffic Manager 11.5.0
2.1
CVSSv2
CVE-2016-7474
In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain normally unrecoverable information.
F5 Big-ip Local Traffic Manager 11.5.0F5 Big-ip Local Traffic Manager 11.4.1F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Local Traffic Manager 11.2.1F5 Big-ip Local Traffic Manager 11.4.0F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Local Traffic Manager 11.5.4F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Local Traffic Manager 11.5.3F5 Big-ip Local Traffic Manager 11.5.1F5 Big-ip Local Traffic Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.4.0F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.6.1F5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Application Acceleration Manager 11.6.0
6.1
CVSSv2
CVE-2015-6546
The vCMP host in F5 BIG-IP Analytics, APM, ASM, GTM, Link Controller, and LTM 11.0.0 prior to 11.6.0, BIG-IP AAM 11.4.0 prior to 11.6.0, BIG-IP AFM and PEM 11.3.0 prior to 11.6.0, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.0.0 up to and including 11.3.0, BIG-IP PSM 11.0.0 up...
F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 11.4.0F5 Big-ip Application Acceleration Manager 11.5.0F5 Big-ip Global Traffic Manager 11.0.0F5 Big-ip Global Traffic Manager 11.4.0F5 Big-ip Global Traffic Manager 11.4.1F5 Big-ip Global Traffic Manager 11.5.0F5 Big-ip Global Traffic Manager 11.5.1F5 Big-ip Global Traffic Manager 11.1.0F5 Big-ip Global Traffic Manager 11.2.1F5 Big-ip Global Traffic Manager 11.5.3F5 Big-ip Global Traffic Manager 11.2.0F5 Big-ip Global Traffic Manager 11.3.0F5 Big-ip Global Traffic Manager 11.5.2F5 Big-ip Access Policy Manager 11.1.0F5 Big-ip Access Policy Manager 11.2.0F5 Big-ip Access Policy Manager 11.2.1F5 Big-ip Access Policy Manager 11.3.0F5 Big-ip Access Policy Manager 11.5.3
3.5
CVSSv2
CVE-2016-7469
A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WOM and WebSafe version 12.0.0 - 12.1.2, 11.4.0 - 11.6.1, and 11...
F5 Big-ip Local Traffic Manager 11.5.4F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Local Traffic Manager 11.4.1F5 Big-ip Local Traffic Manager 11.5.0F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Local Traffic Manager 11.2.1F5 Big-ip Local Traffic Manager 11.4.0F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 11.5.1F5 Big-ip Local Traffic Manager 11.5.2F5 Big-ip Local Traffic Manager 11.5.3F5 Big-ip Local Traffic Manager 12.1.2F5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Application Acceleration Manager 11.6.0F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 11.5.0F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Application Acceleration Manager 12.1.1F5 Big-ip Application Acceleration Manager 11.5.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook