Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

big-ip webaccelerator vulnerabilities and exploits

(subscribe to this query)
5.9
CVSSv3
CVE-2018-5522
On F5 BIG-IP 13.0.0, 12.0.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, when processing DIAMETER transactions with carefully crafted attribute-value pairs, TMM may crash.
F5 Big-ip Application Acceleration Manager 11.2.1F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 13.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 11.2.1F5 Big-ip Local Traffic Manager 13.0.0F5 Big-ip Advanced Firewall Manager 13.0.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 11.2.1F5 Big-ip Analytics 11.2.1F5 Big-ip AnalyticsF5 Big-ip Analytics 13.0.0F5 Big-ip Access Policy Manager 13.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 11.2.1F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 11.2.1F5 Big-ip Application Security Manager 13.0.0F5 Big-ip Domain Name System 11.2.1F5 Big-ip Domain Name SystemF5 Big-ip Domain Name System 13.0.0F5 Big-ip Edge Gateway 13.0.0
NA
CVE-2014-6032
Multiple XML External Entity (XXE) vulnerabilities in the Configuration utility in F5 BIG-IP LTM, ASM, GTM, and Link Controller 11.0 up to and including 11.6.0 and 10.0.0 up to and including 10.2.4, AAM 11.4.0 up to and including 11.6.0, ARM 11.3.0 up to and including 11.6.0, Ana...
F5 Big-ip Protocol Security Module 10.2.3F5 Big-ip Protocol Security Module 11.0.0F5 Big-ip Protocol Security Module 10.2.0F5 Big-ip Protocol Security Module 10.2.1F5 Big-ip Protocol Security Module 11.2.1F5 Big-ip Protocol Security Module 11.3.0F5 Big-ip Protocol Security Module 11.4.0F5 Big-ip Protocol Security Module 10.0.0F5 Big-ip Protocol Security Module 10.1.0F5 Big-ip Protocol Security Module 11.1.0F5 Big-ip Protocol Security Module 11.2.0F5 Big-ip Protocol Security Module 10.2.2F5 Big-ip Protocol Security Module 10.2.4F5 Big-ip Protocol Security Module 11.4.1F5 Big-ip Global Traffic Manager 10.0.0F5 Big-ip Global Traffic Manager 10.1.0F5 Big-ip Global Traffic Manager 11.1.0F5 Big-ip Global Traffic Manager 11.2.0F5 Big-ip Global Traffic Manager 11.6.0F5 Big-ip Global Traffic Manager 10.2.2F5 Big-ip Global Traffic Manager 10.2.3F5 Big-ip Global Traffic Manager 11.4.1
7.5
CVSSv3
CVE-2018-5533
Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic.
F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 13.0.0F5 Big-ip Application Acceleration Manager 13.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 13.0.0F5 Big-ip AnalyticsF5 Big-ip Analytics 13.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 13.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 13.0.0F5 Big-ip Domain Name System 13.0.0F5 Big-ip Domain Name SystemF5 Big-ip Edge GatewayF5 Big-ip Edge Gateway 13.0.0F5 Big-ip Fraud Protection ServiceF5 Big-ip Fraud Protection Service 13.0.0F5 Big-ip Global Traffic ManagerF5 Big-ip Global Traffic Manager 13.0.0F5 Big-ip Link ControllerF5 Big-ip Link Controller 13.0.0
7.5
CVSSv3
CVE-2018-5513
On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.3, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, a malformed TLS handshake causes TMM to crash leading to a disruption of service. This issue is only exposed on the data plane when Proxy SSL configuration is enabled. The control pl...
F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 13.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 13.0.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 13.0.0F5 Big-ip AnalyticsF5 Big-ip Analytics 13.0.0F5 Big-ip Access Policy Manager 13.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 13.0.0F5 Big-ip Domain Name SystemF5 Big-ip Domain Name System 13.0.0F5 Big-ip Edge Gateway 13.0.0F5 Big-ip Edge GatewayF5 Big-ip Global Traffic ManagerF5 Big-ip Global Traffic Manager 13.0.0F5 Big-ip Link ControllerF5 Big-ip Link Controller 13.0.0F5 Big-ip Policy Enforcement Manager 13.0.0F5 Big-ip Policy Enforcement Manager
6.1
CVSSv3
CVE-2018-5521
On F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, carefully crafted URLs can be used to reflect arbitrary content into GeoIP lookup responses, potentially exposing clients to XSS.
F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 11.2.1F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 11.2.1F5 Big-ip Advanced Firewall Manager 11.2.1F5 Big-ip Advanced Firewall ManagerF5 Big-ip Analytics 11.2.1F5 Big-ip AnalyticsF5 Big-ip Access Policy Manager 11.2.1F5 Big-ip Access Policy ManagerF5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 11.2.1F5 Big-ip Domain Name SystemF5 Big-ip Domain Name System 11.2.1F5 Big-ip Edge Gateway 11.2.1F5 Big-ip Edge GatewayF5 Big-ip Global Traffic Manager 11.2.1F5 Big-ip Global Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Link Controller 11.2.1F5 Big-ip Policy Enforcement ManagerF5 Big-ip Policy Enforcement Manager 11.2.1
5.3
CVSSv3
CVE-2018-5532
On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be resolved by the cache even after the parent server revokes the record, if the DNS Cache is receiving a stream of requests for the cached name.
F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 13.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 13.0.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 13.0.0F5 Big-ip AnalyticsF5 Big-ip Analytics 13.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 13.0.0F5 Big-ip Application Security Manager 13.0.0F5 Big-ip Application Security ManagerF5 Big-ip Domain Name System 13.0.0F5 Big-ip Domain Name SystemF5 Big-ip Edge GatewayF5 Big-ip Edge Gateway 13.0.0F5 Big-ip Fraud Protection ServiceF5 Big-ip Fraud Protection Service 13.0.0F5 Big-ip Global Traffic ManagerF5 Big-ip Global Traffic Manager 13.0.0F5 Big-ip Link Controller 13.0.0F5 Big-ip Link Controller
7.5
CVSSv3
CVE-2018-5535
On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed by a Virtual Server with an associated QoE profile that has Video enabled, may cause TMM to incorrectly buffer response data causing the TMM to restart resultin...
F5 Big-ip Local Traffic ManagerF5 Big-ip Local Traffic Manager 14.0.0F5 Big-ip Application Acceleration Manager 14.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall Manager 14.0.0F5 Big-ip Advanced Firewall ManagerF5 Big-ip AnalyticsF5 Big-ip Analytics 14.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 14.0.0F5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 14.0.0F5 Big-ip Domain Name System 14.0.0F5 Big-ip Domain Name SystemF5 Big-ip Edge Gateway 14.0.0F5 Big-ip Edge GatewayF5 Big-ip Fraud Protection ServiceF5 Big-ip Fraud Protection Service 14.0.0F5 Big-ip Global Traffic ManagerF5 Big-ip Global Traffic Manager 14.0.0F5 Big-ip Link ControllerF5 Big-ip Link Controller 14.0.0
6.5
CVSSv3
CVE-2017-6158
In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling of invalid IP addresses.
F5 Big-ip Local Traffic Manager 11.2.1F5 Big-ip Local Traffic ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Application Acceleration Manager 11.2.1F5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 11.2.1F5 Big-ip AnalyticsF5 Big-ip Analytics 11.2.1F5 Big-ip Access Policy ManagerF5 Big-ip Access Policy Manager 11.2.1F5 Big-ip Application Security Manager 11.2.1F5 Big-ip Application Security ManagerF5 Big-ip Edge GatewayF5 Big-ip Edge Gateway 11.2.1F5 Big-ip Global Traffic ManagerF5 Big-ip Global Traffic Manager 11.2.1F5 Big-ip Link ControllerF5 Big-ip Link Controller 11.2.1F5 Big-ip Policy Enforcement ManagerF5 Big-ip Policy Enforcement Manager 11.2.1F5 Big-ip Webaccelerator 11.2.1F5 Big-ip Webaccelerator
7.5
CVSSv3
CVE-2018-5510
On F5 BIG-IP 11.5.4 HF4-11.5.5, the Traffic Management Microkernel (TMM) may restart when processing a specific sequence of packets on IPv6 virtual servers.
F5 Big-ip Local Traffic Manager 11.5.4F5 Big-ip Local Traffic Manager 11.5.5F5 Big-ip Application Acceleration Manager 11.5.4F5 Big-ip Application Acceleration Manager 11.5.5F5 Big-ip Advanced Firewall Manager 11.5.4F5 Big-ip Advanced Firewall Manager 11.5.5F5 Big-ip Analytics 11.5.4F5 Big-ip Analytics 11.5.5F5 Big-ip Access Policy Manager 11.5.4F5 Big-ip Access Policy Manager 11.5.5F5 Big-ip Application Security Manager 11.5.4F5 Big-ip Application Security Manager 11.5.5F5 Big-ip Edge Gateway 11.5.4F5 Big-ip Edge Gateway 11.5.5F5 Big-ip Global Traffic Manager 11.5.4F5 Big-ip Global Traffic Manager 11.5.5F5 Big-ip Link Controller 11.5.5F5 Big-ip Link Controller 11.5.4F5 Big-ip Policy Enforcement Manager 11.5.4F5 Big-ip Policy Enforcement Manager 11.5.5F5 Big-ip Webaccelerator 11.5.4F5 Big-ip Webaccelerator 11.5.5
4.3
CVSSv3
CVE-2018-5525
A local file vulnerability exists in the F5 BIG-IP Configuration utility on versions 13.0.0, 12.1.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 that exposes files containing F5-provided data only and do not include any configuration data, proxied traffic, or other potential...
F5 Big-ip Application Acceleration Manager 13.0.0F5 Big-ip Application Acceleration ManagerF5 Big-ip Local Traffic Manager 13.0.0F5 Big-ip Local Traffic ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Firewall Manager 13.0.0F5 Big-ip AnalyticsF5 Big-ip Analytics 13.0.0F5 Big-ip Access Policy Manager 13.0.0F5 Big-ip Access Policy ManagerF5 Big-ip Application Security ManagerF5 Big-ip Application Security Manager 13.0.0F5 Big-ip Domain Name SystemF5 Big-ip Domain Name System 13.0.0F5 Big-ip Edge GatewayF5 Big-ip Edge Gateway 13.0.0F5 Big-ip Global Traffic ManagerF5 Big-ip Global Traffic Manager 13.0.0F5 Big-ip Link Controller 13.0.0F5 Big-ip Link ControllerF5 Big-ip Policy Enforcement ManagerF5 Big-ip Policy Enforcement Manager 13.0.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook