big-ip advanced web application firewall · threatengine.sh

Home/Product/f5 big ip advanced web application firewall

Product

f5 big ip advanced web application firewall

154 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

>= 17.1.0 and < 17.1.3

When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests along with conditions be

>= 16.1.0 and <= 16.1.6

A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages.

>= 15.1.0 and < 15.1.10.8

When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management Microkernel (TMM

>= 15.1.0 and < 15.1.10.8

When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process

>= 15.1.0 and < 15.1.10.8

When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate

>= 15.1.0 and < 15.1.10.8

A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role

>= 16.1.0 and < 16.1.6.1

Undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. This issue may occur when a Datagram Transp

>= 17.1.0 and < 17.1.3

When a BIG-IP Advanced WAF or ASM security policy is configured with a URL greater than 1024 characters in length for the Data Gua

>= 15.1.0 and < 15.1.10.8

When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memor

>= 15.1.0 and < 15.1.10.8

A validation vulnerability exists in an undisclosed URL in the Configuration utility. Note: Software versions which have reached

>= 15.1.0 and < 15.1.10.8

A vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attack

>= 15.1.0 and < 15.1.10.8

A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an

>= 15.1.0 and < 15.1.10.8

On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated rem

>= 17.1.0 and < 17.1.2

When BIG-IP Advanced WAF is configured on a virtual server with Server-Side Request Forgery (SSRF) protection or when an NGINX ser

>= 15.1.0 and < 15.1.10.8

On BIG-IP systems, undisclosed traffic can cause data corruption and unauthorized data modification in protocols which do not have

>= 15.1.0 and < 15.1.10.8

Under undisclosed traffic conditions along with conditions beyond the attacker's control, hardware systems with a High-Speed Bridg

>= 15.1.0 and < 15.1.10.8

When the database variable tm.tcpudptxchecksum is configured as non-default value Software-only on a BIG-IP system, undisclosed

>= 15.1.0 and < 15.1.10.8

When a BIG-IP Advanced WAF or BIG-IP ASM Security Policy is configured with a JSON content profile that has a malformed JSON schem

>= 15.1.0 and < 15.1.10.8

A directory traversal vulnerability exists in TMUI that allows a highly privileged authenticated attacker to access files which a

>= 15.1.0 and < 15.1.10.8

When running in Appliance mode, a highly privileged authenticated attacker with access to SCP and SFTP may be able to bypass Appli

>= 15.1.0 and < 15.1.10.8

When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object uses the embe

>= 15.1.0 and < 15.1.1.0.8

When an iRule using an ILX::call command is configured on a virtual server, undisclosed traffic can cause the Traffic Management

>= 15.1.0 and < 15.1.10.8

When a TCP profile with Multipath TCP (MPTCP) enabled is configured on a virtual server, undisclosed traffic along with conditions

>= 16.1.0 and < 16.1.6

When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase i

>= 15.1.0 and < 15.1.10.8

An HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to break the max

>= 15.1.0 and < 15.1.10.8

When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman

>= 15.1.0 and <= 15.1.10

When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on

>= 15.1.0 and <= 15.1.10

When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate. N

>= 15.1.0 and < 15.1.9

When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an in

>= 16.1.0 and < 16.1.6

When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory r

>= 15.1.0 and < 15.1.10.7

When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tm

>= 15.1.0 and < 15.1.10.6

A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an

>= 15.1.0 and <= 15.1.10

When SNMP v1 or v2c are disabled on the BIG-IP, undisclosed requests can cause an increase in memory resource utilization. No

>= 15.1.0 and <= 15.1.10

When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed traffi

>= 15.1.0 and <= 15.1.10

When a BIG-IP message routing profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resou

>= 15.1.0 and <= 15.1.10

When SIP session Application Level Gateway mode (ALG) profile with Passthru Mode enabled and SIP router ALG profile are configured

>= 15.1.0 and < 15.1.10.6

Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticate

>= 15.1.0 and < 15.1.10.5

BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings

>= 15.1.0 and <= 15.1.1

In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV NIC, undiscl

>= 15.1.0 and <= 15.1.1

Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names. Note: Software versions which h

>= 15.1.0 and <= 15.1.1

When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions b

>= 15.1.0 and <= 15.1.1

When a stateless virtual server is configured on BIG-IP system with a High-Speed Bridge (HSB), undisclosed requests can cause TMM

When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.

>= 15.1.0 and < 15.1.10.4

A reflected cross-site scripting (XSS) vulnerability exist in undisclosed page of the BIG-IP Configuration utility that allows an

>= 15.1.0 and < 15.1.10

Under certain conditions, a data leak may occur in the Traffic Management Microkernels (TMMs) of BIG-IP tenants running on VELOS a

>= 15.1.0 and < 15.1.10.4

A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an

>= 15.1.0 and < 15.1.10.4

When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along with

>= 15.1.0 and < 15.1.10.4

A DOM-based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows

>= 15.1.0 and < 15.1.10.8

When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel (TMM) to termina

>= 15.1.0 and < 15.1.10

Undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. For the Application Visibility and Reporting

>= 15.1.0 and < 15.1.10

An SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility. Note: Software versions whi

>= 17.1.0 and < 17.1.1

When a BIG-IP Advanced WAF or BIG-IP ASM policy with a Request Body Handling option is attached to a virtual server, undisclosed r

>= 16.1.0 and < 16.1.4

When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed traffic can caus

>= 17.1.0 and < 17.1.1

When a BIG-IP ASM/Advanced WAF security policy is configured on a virtual server, undisclosed requests can cause an increase in me

>= 13.1.0 and <= 13.1.5

An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacke

>= 13.1.0 and <= 13.1.5

Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP syste

>= 13.1.0 and <= 13.1.5

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams q

>= 13.1.0 and <= 13.1.5

Exposure of Sensitive Information vulnerability exist in an undisclosed BIG-IP TMOS shell (tmsh) command which may allow an authen

>= 13.1.0 and <= 14.1.5

When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restric

>= 13.1.0 and <= 13.1.5

The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process.

>= 13.1.0 and <= 13.1.5

When TACACS+ audit forwarding is configured on BIG-IP or BIG-IQ system, sharedsecret is logged in plaintext in the audit log. No

>= 13.1.0 and <= 13.1.5

When a non-admin user has been assigned an administrator role via an iControl REST PUT request and later the user's role is revert

>= 13.1.0 and <= 13.1.5

The BIG-IP and BIG-IQ systems do not encrypt some sensitive information written to Database (DB) variables. Note: Software vers

>= 13.1.0 and <= 13.1.5

A directory traversal vulnerability exists in the BIG-IP Configuration Utility that may allow an authenticated attacker to execute

>= 13.1.0 and <= 13.1.5

When IPSec is configured on a Virtual Server, undisclosed traffic can cause TMM to terminate. Note: Software versions which hav

>= 13.1.0 and <= 13.1.5

When TCP Verified Accept is enabled on a TCP profile that is configured on a Virtual Server, undisclosed requests can cause an inc

>= 13.1.0 and <= 14.1.5

An authenticated user's session cookie may remain valid for a limited time after logging out from the BIG-IP Configuration utility

>= 16.1.0 and < 16.1.4.1

When a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, and an iRule using the HTTP_REQ

>= 13.1.0 and < 13.1.4

Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards generate a deterministic password for the Crypto User account. Th

>= 13.1.0 and <= 13.1.5

A cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attack

>= 13.1.0 and <= 13.1.5

An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending undisclosed

>= 13.1.0 and <= 13.1.5

A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which allow

>= 14.1.0 and < 14.1.5.4

When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can caus

>= 13.1.0 and <= 13.1.5

A directory traversal vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which may allow an authentic

>= 13.1.0 and <= 13.1.5

Multiple reflected cross-site scripting (XSS) vulnerabilities exist in undisclosed pages of the BIG-IP Configuration utility which

When an SSL profile is configured on a Virtual Server, undisclosed traffic can cause an increase in CPU or SSL accelerator resourc

>= 13.1.0 and <= 13.1.5

On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.0 before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1

>= 13.1.0 and <= 13.1.5

On specific hardware platforms, on BIG-IP versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all v

>= 15.1.0 and < 15.1.7

When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can

>= 14.1.0 and < 14.1.5.2

When a BIG-IP Advanced WAF/ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to

>= 13.1.0 and < 13.1.5.1

In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, When the Advanced

On F5 BIG-IP LTM, Advanced WAF, ASM, or APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions pr

On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guide

On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prior to 16.1.2.1, 15.1.x versions prior to 15.1.5, 14.1.x versions prior

On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guide

>= 14.1.0 and <= 14.1.4

On BIG-IP FPS, ASM, and Advanced WAF versions 16.1.x before 16.1.1, 15.1.x before 15.1.4, and 14.1.x before 14.1.4.4, an XML Exter

>= 13.1.0 and <= 13.1.4

On version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when the BIG-IP Virtu

>= 11.6.1 and <= 11.6.5

On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6

>= 12.1.5.3 and <= 12.1.6

On BIG-IP versions 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, 13.1.x beginning in 13.1.3.6, 12.1.5.3-12.1.6, and 11.6.5.2, when

>= 12.1.0 and <= 12.1.6

On BIG-IP ASM & Advanced WAF version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.

>= 13.1.0 and <= 13.1.4

On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, when a SIP ALG p

>= 12.1.0 and <= 12.1.5

On BIG-IP version 16.1.x before 16.1.2.1, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x and 12.1.x, and

>= 13.1.0 and <= 17.1.2

The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actual

>= 16.0.0 and < 16.0.1.2

On version 16.0.x before 16.0.1.2, insufficient permission checks may allow authenticated users with guest privileges to perform S

>= 14.1.0 and <= 14.1.4

On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, and 14.1.x before 14.1.4.3, a DOM based cross-site scripting (XSS) vuln

>= 13.1.0 and <= 13.1.4

BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 1

>= 12.1.0 and <= 12.1.6

On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x befor

>= 13.1.3.5 and <= 13.1.3.6

On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, and 13.1.x before 13.1.4, when JSON content pro

>= 11.6.1 and <= 11.6.5

On version 15.1.x before 15.1.0.5, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all versions of 12.1.x and 11.6.x, an authe

>= 16.0.0 and <= 16.0.1

On version 16.0.x before 16.0.1.2, when a BIG-IP ASM and DataSafe profile are configured on a virtual server, undisclosed requests

>= 11.6.1 and <= 11.6.5.2

On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 1

>= 12.1.0 and <= 12.1.6

On BIG-IP Advanced WAF and BIG-IP ASM version 16.x before 16.1.0x, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 1

>= 12.1.0 and <= 12.1.6

On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions

>= 12.1.0 and < 12.1.6

On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, and 12.1.x before 12.1

>= 12.1.0 and <= 12.1.6

On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions o

>= 13.1.0 and < 13.1.3.6

On version 15.1.x before 15.1.3, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6, when the brute force protection feature of BI

>= 15.1.0.4 and < 15.1.3.1

On BIG-IP versions 15.1.0.4 through 15.1.3, when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) driver is use

>= 15.1.0 and < 15.1.3.1

On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3 and NGINX App Protect on all version

>= 15.1.0 and < 15.1.3

On BIG-IP version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3, when the iRules RESOLVER::summarize command is used on a virtua

>= 11.6.1 and <= 11.6.5

On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions

>= 13.1.0 and < 13.1.4

On BIG-IP 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.0.8 through 13.1.3.6, and all versions of 16.0.x, when running in App

>= 14.1.0 and < 14.1.4

On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, and 14.1.x before 14.1.4, BIG-IP Advanced WAF and ASM are missing author

>= 13.1.0 and < 13.1.4

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, and 13.1.x before 13.1.4, lack of input val

>= 15.1.0 and < 15.1.3

On BIG-IP version 16.0.x before 16.0.1.1 and 15.1.x before 15.1.3, malformed HTTP/2 requests may cause an infinite loop which caus

>= 12.1.0 and < 12.1.5.3

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 1

>= 11.6.1 and < 11.6.5.3

On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11

On BIG-IP versions 14.1.4 and 16.0.1.1, when the Traffic Management Microkernel (TMM) process handles certain undisclosed traffic,

>= 11.6.1 and < 11.6.5.3

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, 12.1.x before 12.

>= 11.6.1 and < 11.6.5.3

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, 12.1.x before 12.

>= 11.6.1 and < 11.6.5.3

On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3,

>= 13.1.3.4 and < 13.1.3.6

On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2, if the tmm.http.rfc.enforcement BigDB key is enabled in a BIG-IP system, or the

>= 14.1.0 and < 14.1.4

On versions 15.0.x before 15.1.0 and 14.1.x before 14.1.4, the BIG-IP system provides an option to connect HTTP/2 clients to HTTP/

>= 11.6.1 and < 11.6.5.3

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.

>= 11.6.1 and < 11.6.5.3

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.

>= 12.1.0 and < 12.1.5.3

On BIG-IP Advanced WAF and BIG-IP ASM versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before

>= 12.1.0 and < 12.1.5.3

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before

>= 11.6.1 and < 11.6.5.3

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.

>= 11.6.1 and < 11.6.5.3

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.

>= 11.6.1 and < 11.6.5.3

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.

>= 11.6.1 and < 11.6.5.3

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.

>= 11.6.1 and < 11.6.5.3

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.

>= 12.1.0 and < 12.1.5.3

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before

>= 11.6.1 and < 11.6.5.2

On BIG-IP Advanced WAF and ASM version 15.1.x before 15.1.0.2, 15.0.x before 15.0.1.4, 14.1.x before 14.1.2.5, 13.1.x before 13.1.

>= 11.6.1 and <= 11.6.5

On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12.1.x and 1

>= 14.1.0 and < 14.1.3.1

On BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3, cooperation between malicious HTTP client code and a malicious server may cau

>= 11.6.1 and <= 11.6.5

On all versions of BIG-IP 12.1.x and 11.6.x, the original TLS protocol includes a weakness in the master secret negotiation that i

>= 12.1.0 and <= 12.1.5

On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.2.8, 13.1.x before 13.1.3.5, and all 12.1.x versi

>= 12.1.0 and <= 12.1.5

On BIG-IP Advanced WAF and ASM version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.

>= 14.1.0 and < 14.1.3.1

On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, and 14.1.x before 14.1.3.1, under some circumstances, Traffic Ma

>= 13.1.0 and < 13.1.3.6

On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6 and all version

>= 14.1.0 and < 14.1.3.1

On BIG-IP ASM & Advanced WAF versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, under certain conditions, Analytics, Vi

>= 14.1.0 and < 14.1.3.1

On BIG-IP 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, a cross-site scripting (XSS) vulnerability exists in an undisclosed

>= 11.6.1 and <= 11.6.5

When a BIG-IP ASM or Advanced WAF system running version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-

>= 13.1.0 and < 13.1.3.5

On BIG-IP versions 14.0.0-14.0.1 and 13.1.0-13.1.3.4, certain traffic pattern sent to a virtual server configured with an FTP prof

>= 15.0.0 and < 15.1.2

In versions 16.0.0-16.0.0.1 and 15.1.0-15.1.1, on specific BIG-IP platforms, attackers may be able to obtain TCP sequence numbers

>= 14.1.0 and < 14.1.2.8

In BIG-IP Advanced WAF and FPS versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, under some circumstances, certain f

>= 14.1.0 and <= 14.1.0.1

In versions 14.1.0-14.1.0.1 and 14.1.2.5-14.1.2.7, when a BIG-IP object is created or listed through the REST interface, the prote

>= 13.1.0 and <= 13.1.3

In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.3, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, and 13.1.0-13.1.3.4, BIG-IP Virtual Edition (VE) s

>= 11.6.1 and <= 11.6.5.2

On BIG-IP 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when negotiating IPSec tunnels with configured, authenticated pee

>= 11.6.1 and < 11.6.2

In versions 13.0.0-13.0.0 HF2, 12.1.0-12.1.2 HF1, and 11.6.1-11.6.2, BIG-IP platforms with Cavium Nitrox SSL hardware acceleration

>= 11.6.1 and <= 11.6.5

In BIG-IP versions 15.0.0-15.1.0.4, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, iControl REST does not

>= 11.6.1 and < 11.6.5

In versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, the BIG-IP Client or Server S

>= 11.6.1 and < 11.6.5.2

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the r

>= 11.6.1 and < 11.6.5.2

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin