Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

f5 big-ip domain name system 11.5.3 vulnerabilities and exploits

(subscribe to this query)
2.9
CVSSv2
CVE-2017-6161
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1, when ConfigSync is configured, attackers on adjacent networks may be able to bypass the TLS pr...
F5 Big-ip Local Traffic Manager 11.2.1F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Local Traffic Manager 12.1.2F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Application Acceleration Manager 11.2.1F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 11.6.0F5 Big-ip Application Acceleration Manager 11.6.1F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Application Acceleration Manager 12.1.2F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 12.1.1F5 Big-ip Advanced Firewall Manager 12.1.2F5 Big-ip Advanced Firewall Manager 11.2.1F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 11.6.0F5 Big-ip Advanced Firewall Manager 11.6.1F5 Big-ip Advanced Firewall Manager 12.1.0
5
CVSSv2
CVE-2016-5023
Virtual servers in F5 BIG-IP systems 11.2.1 HF11 through HF15, 11.4.1 HF4 through HF10, 11.5.3 up to and including 11.5.4, 11.6.0 HF5 through HF7, and 12.0.0, when configured with a TCP profile, allow remote malicious users to cause a denial of service (Traffic Management Microke...
F5 Big-ip Edge Gateway 11.2.1F5 Big-ip Protocol Security Module 11.2.1F5 Big-ip Protocol Security Module 11.4.1F5 Big-ip Analytics 11.5.3F5 Big-ip Analytics 11.4.1F5 Big-ip Analytics 11.2.1F5 Big-ip Analytics 12.0.0F5 Big-ip Analytics 11.5.4F5 Big-ip Analytics 11.6.0F5 Big-ip Application Security Manager 12.0.0F5 Big-ip Application Security Manager 11.2.1F5 Big-ip Application Security Manager 11.5.4F5 Big-ip Application Security Manager 11.4.1F5 Big-ip Application Security Manager 11.6.0F5 Big-ip Application Security Manager 11.5.3F5 Big-ip Advanced Firewall Manager 12.0.0F5 Big-ip Advanced Firewall Manager 11.6.0F5 Big-ip Advanced Firewall Manager 11.5.3F5 Big-ip Advanced Firewall Manager 11.4.1F5 Big-ip Advanced Firewall Manager 11.5.4F5 Big-ip Domain Name System 12.0.0F5 Big-ip Policy Enforcement Manager 12.0.0
2.1
CVSSv2
CVE-2016-6249
F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive attributes such as passwords in plaintext to /var/log/restjavad.0.log. It may allow local users to obtain sensitive information by reading these files.
F5 Big-ip Websafe 11.5.4F5 Big-ip Websafe 11.6.0F5 Big-ip Policy Enforcement Manager 11.5.2F5 Big-ip Policy Enforcement Manager 11.5.1F5 Big-ip Application Security Manager 11.5.4F5 Big-ip Application Security Manager 11.6.0F5 Big-ip Access Policy Manager 11.5.4F5 Big-ip Link Controller 11.6.1F5 Big-ip Analytics 11.5.4F5 Big-ip Analytics 11.6.0F5 Big-ip Advanced Firewall Manager 11.5.4F5 Big-ip Advanced Firewall Manager 11.6.0F5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Application Acceleration Manager 11.6.0F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Global Traffic Manager 11.5.0F5 Big-ip Link Controller 11.5.0F5 Big-ip Websafe 11.5.2F5 Big-ip Websafe 11.5.3F5 Big-ip Policy Enforcement Manager 11.5.4
3.5
CVSSv2
CVE-2016-7469
A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WOM and WebSafe version 12.0.0 - 12.1.2, 11.4.0 - 11.6.1, and 11...
F5 Big-ip Local Traffic Manager 11.5.4F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Local Traffic Manager 11.4.1F5 Big-ip Local Traffic Manager 11.5.0F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Local Traffic Manager 11.2.1F5 Big-ip Local Traffic Manager 11.4.0F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 11.5.1F5 Big-ip Local Traffic Manager 11.5.2F5 Big-ip Local Traffic Manager 11.5.3F5 Big-ip Local Traffic Manager 12.1.2F5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Application Acceleration Manager 11.6.0F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 11.5.0F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Application Acceleration Manager 12.1.1F5 Big-ip Application Acceleration Manager 11.5.2
5
CVSSv2
CVE-2016-9250
In F5 BIG-IP 11.2.1, 11.4.0 up to and including 11.6.1, and 12.0.0 up to and including 12.1.2, an unauthenticated user with access to the control plane may be able to delete arbitrary files through an undisclosed mechanism.
F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Local Traffic Manager 11.4.1F5 Big-ip Local Traffic Manager 11.5.1F5 Big-ip Local Traffic Manager 11.5.3F5 Big-ip Local Traffic Manager 11.5.4F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Local Traffic Manager 12.1.2F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Local Traffic Manager 11.2.1F5 Big-ip Local Traffic Manager 11.4.0F5 Big-ip Local Traffic Manager 11.5.0F5 Big-ip Local Traffic Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Application Acceleration Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Application Acceleration Manager 11.6.0F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Application Acceleration Manager 12.1.1
4
CVSSv2
CVE-2016-5021
The iControl REST service in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.5.x prior to 11.5.4, 11.6.x prior to 11.6.1, and 12.x prior to 12.0.0 HF3; BIG-IP DNS 12.x prior to 12.0.0 HF3; BIG-IP GTM 11.5.x prior to 11.5.4 and 11.6.x prior to 11.6.1; BIG...
F5 Big-iq Application Delivery Controller 4.5.0F5 Big-iq Cloud And Orchestration 1.0.0F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 11.6.0F5 Big-ip Application Acceleration Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.5.0F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Access Policy Manager 11.5.0F5 Big-ip Access Policy Manager 11.5.1F5 Big-ip Access Policy Manager 12.0.0F5 Big-ip Access Policy Manager 11.6.0F5 Big-ip Access Policy Manager 11.5.3F5 Big-ip Access Policy Manager 11.5.2F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Local Traffic Manager 11.5.3F5 Big-ip Local Traffic Manager 11.5.2F5 Big-ip Local Traffic Manager 11.5.1F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 11.5.0F5 Big-ip Global Traffic Manager 11.6.0F5 Big-ip Global Traffic Manager 11.5.2
2.1
CVSSv2
CVE-2016-7474
In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain normally unrecoverable information.
F5 Big-ip Local Traffic Manager 11.5.0F5 Big-ip Local Traffic Manager 11.4.1F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Local Traffic Manager 11.2.1F5 Big-ip Local Traffic Manager 11.4.0F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Local Traffic Manager 11.5.4F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Local Traffic Manager 11.5.3F5 Big-ip Local Traffic Manager 11.5.1F5 Big-ip Local Traffic Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.4.0F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.6.1F5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Application Acceleration Manager 11.6.0
5
CVSSv2
CVE-2016-5736
The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4.x, 11.5.x prior to 11.5.4 HF2, 11.6.x prior to 11.6.1, and 12.x prior to 12.0.0 HF2; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x prior to 11.5....
F5 Big-ip Application Acceleration Manager 11.6.0F5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Application Acceleration Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Application Acceleration Manager 11.4.1F5 Big-ip Application Acceleration Manager 11.5.0F5 Big-ip Application Acceleration Manager 11.4.0F5 Big-ip Webaccelerator 11.2.1F5 Big-ip Analytics 12.0.0F5 Big-ip Analytics 11.6.0F5 Big-ip Analytics 11.5.2F5 Big-ip Analytics 11.4.1F5 Big-ip Analytics 11.4.0F5 Big-ip Analytics 11.2.1F5 Big-ip Analytics 11.5.4F5 Big-ip Analytics 11.5.1F5 Big-ip Analytics 11.5.3F5 Big-ip Analytics 11.5.0F5 Big-ip Domain Name System 12.0.0F5 Big-ip Edge Gateway 11.2.1
5
CVSSv2
CVE-2016-9252
The Traffic Management Microkernel (TMM) in F5 BIG-IP prior to 11.5.4 HF3, 11.6.x prior to 11.6.1 HF2 and 12.x prior to 12.1.2 does not properly handle minimum path MTU options for IPv6, which allows remote malicious users to cause a denial-of-service (DoS) through unspecified ve...
F5 Big-ip Local Traffic Manager 11.4.1F5 Big-ip Local Traffic Manager 11.5.0F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 12.1.0F5 Big-ip Local Traffic Manager 10.2.3F5 Big-ip Local Traffic Manager 10.2.4F5 Big-ip Local Traffic Manager 10.2.1F5 Big-ip Local Traffic Manager 10.2.2F5 Big-ip Local Traffic Manager 11.5.1F5 Big-ip Local Traffic Manager 11.5.2F5 Big-ip Local Traffic Manager 12.1.1F5 Big-ip Local Traffic Manager 11.5.3F5 Big-ip Local Traffic Manager 11.5.4F5 Big-ip Local Traffic Manager 11.2.1F5 Big-ip Local Traffic Manager 11.4.0F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Application Acceleration Manager 11.4.0F5 Big-ip Application Acceleration Manager 11.6.0F5 Big-ip Application Acceleration Manager 11.6.1F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 11.5.1
4
CVSSv2
CVE-2016-2084
F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x prior to 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 prior to 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP AAM 11.4.x prior to 11.4....
F5 Big-iq Security 4.5.0F5 Big-iq Security 4.4.0F5 Big-iq Security 4.2.0F5 Big-iq Security 4.3.0F5 Big-ip Webaccelerator 11.3.0F5 Big-ip Application Security Manager 11.5.4F5 Big-ip Application Security Manager 12.0.0F5 Big-ip Application Security Manager 11.6.0F5 Big-ip Application Security Manager 11.5.3F5 Big-ip Application Security Manager 11.4.0F5 Big-ip Application Security Manager 11.3.0F5 Big-ip Application Security Manager 11.5.1F5 Big-ip Application Security Manager 11.4.1F5 Big-ip Application Security Manager 11.5.2F5 Big-ip Application Security Manager 11.5.0F5 Big-ip Access Policy Manager 11.5.1F5 Big-ip Access Policy Manager 11.5.0F5 Big-ip Access Policy Manager 11.4.1F5 Big-ip Access Policy Manager 11.4.0F5 Big-ip Access Policy Manager 11.5.4F5 Big-ip Access Policy Manager 12.0.0F5 Big-ip Access Policy Manager 11.5.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook