Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

f5 big-iq centralized management 4.6.0 vulnerabilities and exploits

(subscribe to this query)
4.7
CVSSv3
CVE-2018-5516
On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow 2.0.2-2.3.0, authenticated users granted TMOS Shell (tmsh) access can access object...
F5 Big-ip Local Traffic ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip AnalyticsF5 Big-ip Access Policy ManagerF5 Big-ip Application Security ManagerF5 Big-ip Edge GatewayF5 Big-ip Global Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Policy Enforcement ManagerF5 Big-ip WebacceleratorF5 Big-ip WebsafeF5 Big-ip Domain Name SystemF5 Big-ip Enterprise Manager 3.1.1F5 Big-iq Centralized ManagementF5 Big-iq Centralized Management 4.6.0F5 Big-iq Cloud And Orchestration 1.0.0F5 F5 Iworkflow
4.9
CVSSv3
CVE-2018-15321
When BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, iWorkflow 2.1.0-2.3.0, or Enterprise Manager 3.1.1 is licensed for Appliance Mode, Admin and...
F5 Big-ip Local Traffic ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip AnalyticsF5 Big-ip Access Policy ManagerF5 Big-ip Protocol Security ModuleF5 Big-ip Domain Name SystemF5 Big-ip Edge GatewayF5 Big-ip Fraud Protection ServiceF5 Big-ip Global Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Policy Enforcement ManagerF5 Big-ip WebacceleratorF5 Enterprise Manager 3.1.1F5 Big-iq Centralized ManagementF5 Big-iq Centralized Management 4.6.0F5 Big-iq Cloud And Orchestration 1.0.0F5 Iworkflow
6.5
CVSSv3
CVE-2018-15322
On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 6.0.0-6.0.1, 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, iWorkflow 2.0.1-2.3.0, or Enterprise Manager 3.1.1 a BIG-IP user granted with tms...
F5 Big-ip Local Traffic ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip AnalyticsF5 Big-ip Access Policy ManagerF5 Big-ip Protocol Security ModuleF5 Big-ip Domain Name SystemF5 Big-ip Edge GatewayF5 Big-ip Fraud Protection ServiceF5 Big-ip Global Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Policy Enforcement ManagerF5 Big-ip WebacceleratorF5 Enterprise Manager 3.1.1F5 Big-iq Centralized Management 4.6.0F5 Big-iq Centralized ManagementF5 Big-iq Cloud And Orchestration 1.0.0F5 Iworkflow
5.3
CVSSv3
CVE-2014-5209
An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.
Ntp Ntp 4.2.7F5 Big-ip Local Traffic Manager 11.2.1F5 Big-ip Wan Optimization Manager 11.2.1F5 Big-ip Edge Gateway 11.2.1F5 Big-ip Analytics 11.2.1F5 Big-ip Access Policy Manager 11.2.1F5 Big-ip Global Traffic Manager 11.2.1F5 Big-iq Centralized Management 4.6.0F5 Big-ip Webaccelerator 11.2.1F5 Big-ip Link Controller 11.2.1F5 Enterprise Manager 3.1.1F5 Big-iq Adc 4.5.0F5 Big-iq Cloud And Orchestration 1.0.0F5 Big-ip Application Security Manager 11.2.1F5 Big-iq Centralized ManagementF5 Big-ip Local Traffic ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip AnalyticsF5 Big-ip Access Policy ManagerF5 Big-ip Application Security ManagerF5 Big-ip Domain Name System
4.9
CVSSv3
CVE-2016-5021
The iControl REST service in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.5.x prior to 11.5.4, 11.6.x prior to 11.6.1, and 12.x prior to 12.0.0 HF3; BIG-IP DNS 12.x prior to 12.0.0 HF3; BIG-IP GTM 11.5.x prior to 11.5.4 and 11.6.x prior to 11.6.1; BIG...
F5 Big-iq Application Delivery Controller 4.5.0F5 Big-iq Cloud And Orchestration 1.0.0F5 Big-ip Application Acceleration Manager 12.0.0F5 Big-ip Application Acceleration Manager 11.6.0F5 Big-ip Application Acceleration Manager 11.5.3F5 Big-ip Application Acceleration Manager 11.5.2F5 Big-ip Application Acceleration Manager 11.5.0F5 Big-ip Application Acceleration Manager 11.5.1F5 Big-ip Access Policy Manager 11.5.0F5 Big-ip Access Policy Manager 11.5.1F5 Big-ip Access Policy Manager 12.0.0F5 Big-ip Access Policy Manager 11.6.0F5 Big-ip Access Policy Manager 11.5.3F5 Big-ip Access Policy Manager 11.5.2F5 Big-ip Local Traffic Manager 11.6.0F5 Big-ip Local Traffic Manager 11.5.3F5 Big-ip Local Traffic Manager 11.5.2F5 Big-ip Local Traffic Manager 11.5.1F5 Big-ip Local Traffic Manager 12.0.0F5 Big-ip Local Traffic Manager 11.5.0F5 Big-ip Global Traffic Manager 11.6.0F5 Big-ip Global Traffic Manager 11.5.2
NA
CVE-2015-4047
racoon/gssapi.c in IPsec-Tools 0.8.2 allows remote malicious users to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.
Ipsec-tools Ipsec-tools 0.8.2Canonical Ubuntu Linux 12.04Fedoraproject Fedora 20Fedoraproject Fedora 21F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 13.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 13.0.0F5 Big-ip Advanced Firewall Manager 13.0.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip AnalyticsF5 Big-ip Analytics 13.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 13.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 13.0.0F5 Big-ip Domain Name System 13.0.0F5 Big-ip Domain Name SystemF5 Big-ip Global Traffic ManagerF5 Big-ip Edge GatewayF5 Big-ip Link ControllerF5 Big-ip Link Controller 13.0.0
7.4
CVSSv3
CVE-2015-7393
dcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 up to and including 11.6.0 and 12.0.0 prior to 12.0.0 HF1, BIG-IP AAM 11.4.0 up to and including 11.6.0 and 12.0.0 prior to 12.0.0 HF1, BIG-IP AFM and PEM 11.3.0 up to and including 11.6.0 and 12.0.0 prior to 12...
F5 Big-iq Application Delivery Controller 4.5.0F5 Big-ip Application Security Manager 11.4.0F5 Big-ip Application Security Manager 11.2.1F5 Big-ip Application Security Manager 11.2.0F5 Big-ip Application Security Manager 11.6.0F5 Big-ip Application Security Manager 12.0.0F5 Big-ip Application Security Manager 11.5.1F5 Big-ip Application Security Manager 11.4.1F5 Big-ip Application Security Manager 11.3.0F5 Big-iq Security 4.1.0F5 Big-iq Security 4.3.0F5 Big-iq Security 4.5.0F5 Big-iq Security 4.0.0F5 Big-iq Security 4.2.0F5 Big-iq Security 4.4.0F5 Big-ip Wan Optimization Manager 11.2.0F5 Big-ip Wan Optimization Manager 11.2.1F5 Big-ip Wan Optimization Manager 11.3.0F5 Big-ip Global Traffic Manager 11.6.0F5 Big-ip Global Traffic Manager 11.4.1F5 Big-ip Global Traffic Manager 11.3.0F5 Big-ip Global Traffic Manager 11.2.1
7.5
CVSSv3
CVE-2018-14880
The OSPFv3 parser in tcpdump prior to 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
Tcpdump TcpdumpRedhat Enterprise Linux 7.0Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Opensuse Leap 15.0Fedoraproject Fedora 29Fedoraproject Fedora 30Redhat Enterprise Linux 8.0Opensuse Leap 15.1Fedoraproject Fedora 31Apple Mac Os XF5 Big-iq Centralized ManagementF5 Big-iq Centralized Management 7.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip AnalyticsF5 Big-ip Access Policy ManagerF5 Big-ip Application Security ManagerF5 Big-ip Edge GatewayF5 Big-ip Fraud Protection Service
7.5
CVSSv3
CVE-2018-14468
The FRF.16 parser in tcpdump prior to 4.9.3 has a buffer over-read in print-fr.c:mfr_print().
Tcpdump TcpdumpRedhat Enterprise Linux 7.0Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Opensuse Leap 15.0Fedoraproject Fedora 29Fedoraproject Fedora 30Redhat Enterprise Linux 8.0Opensuse Leap 15.1Fedoraproject Fedora 31Apple Mac Os XF5 Big-iq Centralized ManagementF5 Big-iq Centralized Management 7.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip AnalyticsF5 Big-ip Access Policy ManagerF5 Big-ip Application Security ManagerF5 Big-ip Edge GatewayF5 Big-ip Fraud Protection Service
7.5
CVSSv3
CVE-2018-15328
On BIG-IP 14.0.x, 13.x, 12.x, and 11.x, Enterprise Manager 3.1.1, BIG-IQ 6.x, 5.x, and 4.x, and iWorkflow 2.x, the passphrases for SNMPv3 users and trap destinations that are used for authentication and privacy are not handled by the BIG-IP system Secure Vault feature; they are w...
F5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Analytics 14.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Application Security ManagerF5 Big-ip Domain Name SystemF5 Big-ip Edge Gateway 14.0.0F5 Big-ip Fraud Protection ServiceF5 Big-ip Link ControllerF5 Big-ip Policy Enforcement Manager 14.0.0F5 Big-ip WebacceleratorF5 Big-ip Advanced Firewall Manager 14.0.0F5 Big-ip AnalyticsF5 Big-ip Domain Name System 14.0.0F5 Big-ip Edge GatewayF5 Big-ip Link Controller 14.0.0F5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 14.0.0F5 Big-ip Access Policy Manager 14.0.0F5 Big-ip Fraud Protection Service 14.0.0F5 Big-ip Global Traffic Manager
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook