Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

f5 big-ip policy enforcement manager 11.4.1 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2017-6160
In F5 BIG-IP AAM and PEM software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.4.1 to 11.5.4, a remote attacker may create maliciously crafted HTTP request to cause Traffic Management Microkernel (TMM) to restart and temporarily fail to process traffic. This issue is exposed on...
F5 Big-ip Application Acceleration Manager 12.1.1F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Application Acceleration Manager 11.6.0F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Application Acceleration Manager 11.5.0F5 Big-ip Application Acceleration Manager 11.4.0F5 Big-ip Application Acceleration Manager 11.5.5F5 Big-ip Application Acceleration Manager 11.6.1F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Policy Enforcement Manager 11.4.0F5 Big-ip Policy Enforcement Manager 11.4.1F5 Big-ip Policy Enforcement Manager 12.1.0F5 Big-ip Policy Enforcement Manager 12.0.0F5 Big-ip Policy Enforcement Manager 11.6.0F5 Big-ip Policy Enforcement Manager 12.1.1F5 Big-ip Policy Enforcement Manager 11.5.4F5 Big-ip Policy Enforcement Manager 11.5.3F5 Big-ip Policy Enforcement Manager 11.5.2
5
CVSSv2
CVE-2015-8240
The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and BIG-IP PEM prior to 11.4.1 HF10, 11.5.x prior to 11.5.4, and 11.6.x prior to 11.6.0 HF6 and BIG-IP PSM prior to 11.4.1 HF10 does not properly handle TCP options, wh...
F5 Big-ip Protocol Security Module 11.4.1F5 Big-ip Policy Enforcement Manager 11.5.3F5 Big-ip Global Traffic Manager 11.4.1F5 Big-ip Global Traffic Manager 11.6.0F5 Big-ip Analytics 11.4.1F5 Big-ip Analytics 11.6.0F5 Big-ip Local Traffic Manager 11.4.1F5 Big-ip Policy Enforcement Manager 11.6.0F5 Big-ip Link Controller 11.4.1F5 Big-ip Link Controller 11.5.3F5 Big-ip Link Controller 11.6.0F5 Big-ip Advanced Firewall Manager 11.5.3F5 Big-ip Advanced Firewall Manager 11.6.0F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 11.5.3F5 Big-ip Policy Enforcement Manager 11.4.1F5 Big-ip Global Traffic Manager 11.5.3F5 Big-ip Application Security Manager 11.4.1F5 Big-ip Analytics 11.5.3F5 Big-ip Advanced Firewall Manager 11.4.1F5 Big-ip Application Acceleration Manager 11.6.0F5 Big-ip Local Traffic Manager 11.5.3
5
CVSSv2
CVE-2016-5023
Virtual servers in F5 BIG-IP systems 11.2.1 HF11 through HF15, 11.4.1 HF4 through HF10, 11.5.3 up to and including 11.5.4, 11.6.0 HF5 through HF7, and 12.0.0, when configured with a TCP profile, allow remote malicious users to cause a denial of service (Traffic Management Microke...
F5 Big-ip Edge Gateway 11.2.1F5 Big-ip Protocol Security Module 11.2.1F5 Big-ip Protocol Security Module 11.4.1F5 Big-ip Analytics 11.5.3F5 Big-ip Analytics 11.4.1F5 Big-ip Analytics 11.2.1F5 Big-ip Analytics 12.0.0F5 Big-ip Analytics 11.5.4F5 Big-ip Analytics 11.6.0F5 Big-ip Application Security Manager 12.0.0F5 Big-ip Application Security Manager 11.2.1F5 Big-ip Application Security Manager 11.5.4F5 Big-ip Application Security Manager 11.4.1F5 Big-ip Application Security Manager 11.6.0F5 Big-ip Application Security Manager 11.5.3F5 Big-ip Advanced Firewall Manager 12.0.0F5 Big-ip Advanced Firewall Manager 11.6.0F5 Big-ip Advanced Firewall Manager 11.5.3F5 Big-ip Advanced Firewall Manager 11.4.1F5 Big-ip Advanced Firewall Manager 11.5.4F5 Big-ip Domain Name System 12.0.0F5 Big-ip Policy Enforcement Manager 12.0.0
4.3
CVSSv2
CVE-2016-7468
An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic. This vulnerability affects virtual servers associated with TCP profiles when the BIG-IP system's tm.tcpprogressive db variable va...
F5 Big-ip Local Traffic Manager 11.5.0F5 Big-ip Local Traffic Manager 11.5.1F5 Big-ip Local Traffic Manager 11.5.2F5 Big-ip Local Traffic Manager 11.5.4F5 Big-ip Local Traffic Manager 11.4.0F5 Big-ip Local Traffic Manager 11.4.1F5 Big-ip Local Traffic Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.5.0F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.4.0F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Advanced Firewall Manager 11.5.0F5 Big-ip Advanced Firewall Manager 11.5.1F5 Big-ip Advanced Firewall Manager 11.5.2F5 Big-ip Advanced Firewall Manager 11.5.3F5 Big-ip Advanced Firewall Manager 11.4.0F5 Big-ip Advanced Firewall Manager 11.4.1F5 Big-ip Advanced Firewall Manager 11.5.4F5 Big-ip Analytics 11.5.0
5
CVSSv2
CVE-2016-7476
The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, APM, ASM, GTM, Link Controller, PEM, PSM, and WebSafe 11.6.0 prior to 11.6.0 HF6, 11.5.0 prior to 11.5.3 HF2, and 11.3.0 prior to 11.4.1 HF10 may suffer from a memory leak while handling certain types of TCP tra...
F5 Big-ip Websafe 11.6.0F5 Big-ip Protocol Security Module 11.4.0F5 Big-ip Protocol Security Module 11.4.1F5 Big-ip Protocol Security Module 11.3.0F5 Big-ip Policy Enforcement Manager 11.4.0F5 Big-ip Policy Enforcement Manager 11.4.1F5 Big-ip Policy Enforcement Manager 11.5.2F5 Big-ip Policy Enforcement Manager 11.5.3F5 Big-ip Policy Enforcement Manager 11.3.0F5 Big-ip Policy Enforcement Manager 11.6.0F5 Big-ip Policy Enforcement Manager 11.5.0F5 Big-ip Policy Enforcement Manager 11.5.1F5 Big-ip Link Controller 11.3.0F5 Big-ip Link Controller 11.4.0F5 Big-ip Link Controller 11.5.1F5 Big-ip Link Controller 11.5.2F5 Big-ip Link Controller 11.5.3F5 Big-ip Link Controller 11.6.0F5 Big-ip Link Controller 11.4.1F5 Big-ip Link Controller 11.5.0F5 Big-ip Global Traffic Manager 11.3.0F5 Big-ip Global Traffic Manager 11.4.0
5
CVSSv2
CVE-2015-4638
The FastL4 virtual server in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller, and PEM 11.3.0 up to and including 11.5.2 and 11.6.0 up to and including 11.6.0 HF4, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.2.1 up to and including 11.3.0, and BIG-IP PSM 11....
F5 Big-ip Analytics 11.5.0F5 Big-ip Analytics 11.5.1F5 Big-ip Analytics 11.5.2F5 Big-ip Analytics 11.6.0F5 Big-ip Global Traffic Manager 11.5.0F5 Big-ip Global Traffic Manager 11.5.1F5 Big-ip Global Traffic Manager 11.5.2F5 Big-ip Global Traffic Manager 11.6.0F5 Big-ip Link Controller 11.3.0F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Policy Enforcement Manager 11.3.0F5 Big-ip Policy Enforcement Manager 11.4.0F5 Big-ip Policy Enforcement Manager 11.4.1F5 Big-ip Advanced Firewall Manager 11.6.0F5 Big-ip Analytics 11.4.0F5 Big-ip Application Security Manager 11.4.0F5 Big-ip Application Security Manager 11.5.0F5 Big-ip Edge Gateway 11.2.1F5 Big-ip Global Traffic Manager 11.4.0F5 Big-ip Link Controller 11.4.0F5 Big-ip Link Controller 11.5.0F5 Big-ip Local Traffic Manager 11.5.0
5
CVSSv2
CVE-2016-9244
A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer (SSL) session IDs from other sessi...
F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Local Traffic Manager 12.1.2F5 Big-ip Local Traffic Manager 11.5.2F5 Big-ip Local Traffic Manager 11.5.1F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 11.5.0F5 Big-ip Local Traffic Manager 11.4.1F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Local Traffic Manager 11.4.0F5 Big-ip Local Traffic Manager 11.5.4F5 Big-ip Local Traffic Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.6.1F5 Big-ip Application Acceleration Manager 11.4.0F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 12.1.1F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 11.5.0F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.5.3
5
CVSSv2
CVE-2016-5736
The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4.x, 11.5.x prior to 11.5.4 HF2, 11.6.x prior to 11.6.1, and 12.x prior to 12.0.0 HF2; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x prior to 11.5....
F5 Big-ip Application Acceleration Manager 11.6.0F5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Application Acceleration Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 11.5.0F5 Big-ip Application Acceleration Manager 11.4.0F5 Big-ip Webaccelerator 11.2.1F5 Big-ip Analytics 12.0.0F5 Big-ip Analytics 11.6.0F5 Big-ip Analytics 11.5.2F5 Big-ip Analytics 11.4.1F5 Big-ip Analytics 11.4.0F5 Big-ip Analytics 11.2.1F5 Big-ip Analytics 11.5.4F5 Big-ip Analytics 11.5.1F5 Big-ip Analytics 11.5.3F5 Big-ip Analytics 11.5.0F5 Big-ip Domain Name System 12.0.0F5 Big-ip Edge Gateway 11.2.1
6.1
CVSSv2
CVE-2015-6546
The vCMP host in F5 BIG-IP Analytics, APM, ASM, GTM, Link Controller, and LTM 11.0.0 prior to 11.6.0, BIG-IP AAM 11.4.0 prior to 11.6.0, BIG-IP AFM and PEM 11.3.0 prior to 11.6.0, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.0.0 up to and including 11.3.0, BIG-IP PSM 11.0.0 up...
F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 11.4.0F5 Big-ip Application Acceleration Manager 11.5.0F5 Big-ip Global Traffic Manager 11.0.0F5 Big-ip Global Traffic Manager 11.4.0F5 Big-ip Global Traffic Manager 11.4.1F5 Big-ip Global Traffic Manager 11.5.0F5 Big-ip Global Traffic Manager 11.5.1F5 Big-ip Global Traffic Manager 11.1.0F5 Big-ip Global Traffic Manager 11.2.1F5 Big-ip Global Traffic Manager 11.5.3F5 Big-ip Global Traffic Manager 11.2.0F5 Big-ip Global Traffic Manager 11.3.0F5 Big-ip Global Traffic Manager 11.5.2F5 Big-ip Access Policy Manager 11.1.0F5 Big-ip Access Policy Manager 11.2.0F5 Big-ip Access Policy Manager 11.2.1F5 Big-ip Access Policy Manager 11.3.0F5 Big-ip Access Policy Manager 11.5.3
2.1
CVSSv2
CVE-2016-7474
In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain normally unrecoverable information.
F5 Big-ip Local Traffic Manager 11.5.0F5 Big-ip Local Traffic Manager 11.4.1F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Local Traffic Manager 11.2.1F5 Big-ip Local Traffic Manager 11.4.0F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Local Traffic Manager 11.5.4F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Local Traffic Manager 11.5.3F5 Big-ip Local Traffic Manager 11.5.1F5 Big-ip Local Traffic Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.4.0F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.6.1F5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Application Acceleration Manager 11.6.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook