F5 Big-ip Luki w zabezpieczeniach

Oś czasu

Ostatni rok

Wersja

15.1.0130
15.1.1130
15.1.2125
12.1.0117
12.1.1116

Przeciwdziałanie

Official Fix414
Temporary Fix0
Workaround10
Unavailable2
Not Defined201

Wykorzystywanie

High10
Functional0
Proof-of-Concept17
Unproven4
Not Defined596

Wektor dostępu

Not Defined0
Physical2
Local43
Adjacent61
Network521

Uwierzytelnianie

Not Defined0
High50
Low216
None361

Interakcja z użytkownikiem

Not Defined0
Required76
None551

C3BM Index

Ostatni rok

CVSSv3 Base

≤10
≤20
≤34
≤446
≤5117
≤6152
≤7157
≤8118
≤923
≤1010

CVSSv3 Temp

≤10
≤20
≤37
≤449
≤5119
≤6158
≤7153
≤8112
≤919
≤1010

VulDB

≤10
≤21
≤319
≤4103
≤5120
≤6194
≤746
≤8115
≤920
≤109

NVD

≤10
≤20
≤30
≤45
≤533
≤678
≤747
≤8162
≤922
≤1025

CNA

≤10
≤20
≤30
≤44
≤515
≤621
≤711
≤870
≤910
≤103

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k8
<5k107
<10k254
<25k250
<50k8
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k369
<2k46
<5k93
<10k100
<25k19
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (256): 1, 1.0, 1.1, 1.1.1, 1.2, 1.3, 1.4, 1.5, 2.0, 4.0, 4.2, 4.3, 4.4, 4.5, 4.5.1, 4.5.6, 4.5.9, 4.5.11, 4.5.12, 4.6, 4.6.1, 4.6.2, 4.6.3, 7.1, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7, 7.1.7.1, 7.1.8, 7.1.8.1, 7.1.8.2, 7.1.8.3, 7.1.8.4, 7.1.9, 7.1.9.1, 7.1.9.2, 7.1.9.3, 7.1.9.4, 7.1.9.5, 7.1.9.6, 7.1.9.7, 7.2, 7.2.1, 7.2.2, 7.2.3, 8.2, 9, 9.0, 9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.1, 9.2, 9.2.2, 9.4, 9.4.1, 9.4.2, 9.4.3, 9.4.4, 9.4.5, 9.4.6, 9.4.7, 9.4.8, 10.0, 10.0.1, 10.1, 10.2, 10.2.1, 10.2.2, 10.2.3, 10.2.4, 11, 11.0, 11.1, 11.2, 11.2.0 HF2, 11.2.1, 11.2.1 HF15, 11.3, 11.4, 11.4.1, 11.4.1 HF9, 11.5, 11.5.1, 11.5.1 HF1, 11.5.2, 11.5.3, 11.5.4, 11.5.4 HF1, 11.5.4 HF2, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.6, 11.6.0 HF3, 11.6.0 HF5, 11.6.1, 11.6.1 HF1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 12, 12.0, 12.1, 12.1.1, 12.1.2, 12.1.2 HF, 12.1.2-HF1, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.6, 13, 13.0, 13.0.0 HF2, 13.0.1, 13.1, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.1, 13.1.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.2, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.5, 14, 14.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.1, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.4, 14.1.0.5, 14.1.0.6, 14.1.1, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.3, 14.1.4, 14.1.4.1, 14.1.4.2, 14.1.4.3, 14.1.4.4, 14.1.4.5, 14.1.4.6, 14.1.5, 14.1.5.1, 14.1.5.2, 15, 15., 15.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4, 15.0.1.5, 15.1, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.3, 15.1.4, 15.1.5, 15.1.5.1, 15.1.6, 15.1.7, 15.1.8, 15.1.9, 15.1.10.1, 16, 16.0, 16.0.0.1, 16.0.1, 16.0.1.1, 16.0.1.2, 16.1, 16.1.1, 16.1.2, 16.1.2.1, 16.1.2.2, 16.1.3, 16.1.3.1, 16.1.3.2, 16.1.4, 17, 17.0, 17.0.0.1, 17.1, 17.1.0.1, 17.1.0.2, 17.1.1, 3900, 6900, 8900, 8950, 11000, 11050, PB100, PB200

Link to Product Website: https://f5.com/

Typ oprogramowania: Firewall Software

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2024-02-145.15.0F5 BIG-IP Appliance Mode privilege escalation$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-23976
2024-02-144.34.2F5 BIG-IP Advanced WAF/BIG-IP ASM Configuration Utility sql injection$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-23603
2024-02-147.57.3F5 BIG-IP Traffic Management Microkernel denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.06CVE-2024-24775
2024-02-147.57.3F5 BIG-IP Certificate denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-23979
2024-02-147.57.3F5 BIG-IP/BIG-IP Next SPK Traffic Management Microkernel denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-23314
2024-02-147.57.3F5 BIG-IP Advanced WAF/BIG-IP ASM Traffic Management Microkernel memory corruption$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-23805
2024-02-147.27.0F5 BIG-IP iControl REST weak authentication$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-22389
2024-02-147.57.3F5 BIG-IP Advanced WAF/BIG-IP ASM Request Body denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-23308
2024-02-144.94.8F5 BIG-IP Next SPK/BIG-IP Next CNF information disclosure$0-$5k$0-$5kNot DefinedOfficial Fix0.05CVE-2024-23306
2024-02-147.06.8F5 BIG-IP/BIG-IQ scp privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-21782
2024-02-147.57.3F5 BIG-IP AFM IPS Engine denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-21771
2024-02-146.76.6F5 BIG-IP iControl REST Endpoint privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-22093
2024-02-147.57.3F5 BIG-IP Advanced WAF/BIG-IP ASM Traffic Management Microkernel denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-21849
2024-02-147.57.3F5 BIG-IP Advanced WAF/BIG-IP ASM Virtual Server denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-21789
2024-02-147.57.3F5 BIG-IP AFM Traffic Management Microkernel denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-21763
2024-02-147.57.3F5 BIG-IP PEM Traffic Management Microkernel memory corruption$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-23982
2023-10-267.57.4F5 BIG-IP Configuration Utility sql injection$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-46748
2023-10-268.98.7F5 BIG-IP Configuration Utility weak authentication$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-46747
2023-10-255.35.3F5 BIG-IP/BIG-IP Next/BIG-IP Next SPK/BIG-IP Next CNF ZebOS BGP denial of service$5k-$25k$5k-$25kNot DefinedNot Defined0.03CVE-2023-45886
2023-10-107.67.5F5 BIG-IP APM Edge Client Installer privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-5450
2023-10-106.56.4F5 BIG-IP Attack Signature Check privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-40534
2023-10-107.87.6F5 BIG-IP APM/BIG-IP APM Client Installer privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-43611
2023-10-107.27.0F5 BIG-IP APM OAuth Bearer weak authentication$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-40537
2023-10-107.27.0F5 BIG-IP iControl REST privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-42768
2023-10-107.57.3F5 BIG-IP TCP Verified Accept denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2023-40542

602 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 602 results.

więcej wpisów autorstwa F5

◂ PoprzedniPrzeglądKolejny ▸

Might our Artificial Intelligence support you?

Check our Alexa App!