big-ip automation toolchain · threatengine.sh

Home/Product/f5 big ip automation toolchain

Product

f5 big ip automation toolchain

46 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

>= 16.1.0 and <= 16.1.6

A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages.

>= 15.1.0 and < 15.1.10.8

When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management Microkernel (TMM

>= 15.1.0 and < 15.1.10.8

When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate

>= 15.1.0 and < 15.1.10.8

A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role

>= 16.1.0 and < 16.1.6.1

Undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. This issue may occur when a Datagram Transp

>= 15.1.0 and < 15.1.10.8

When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memor

>= 15.1.0 and < 15.1.10.8

A validation vulnerability exists in an undisclosed URL in the Configuration utility. Note: Software versions which have reached

>= 15.1.0 and < 15.1.10.8

A vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attack

>= 15.1.0 and < 15.1.10.8

A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an

>= 15.1.0 and < 15.1.10.8

On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated rem

>= 15.1.0 and < 15.1.10.8

On BIG-IP systems, undisclosed traffic can cause data corruption and unauthorized data modification in protocols which do not have

>= 15.1.0 and < 15.1.10.8

Under undisclosed traffic conditions along with conditions beyond the attacker's control, hardware systems with a High-Speed Bridg

>= 15.1.0 and < 15.1.10.8

When the database variable tm.tcpudptxchecksum is configured as non-default value Software-only on a BIG-IP system, undisclosed

>= 15.1.0 and < 15.1.10.8

A directory traversal vulnerability exists in TMUI that allows a highly privileged authenticated attacker to access files which a

>= 15.1.0 and < 15.1.10.8

When running in Appliance mode, a highly privileged authenticated attacker with access to SCP and SFTP may be able to bypass Appli

>= 15.1.0 and < 15.1.10.8

When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object uses the embe

>= 15.1.0 and < 15.1.1.0.8

When an iRule using an ILX::call command is configured on a virtual server, undisclosed traffic can cause the Traffic Management

>= 15.1.0 and < 15.1.10.8

When a TCP profile with Multipath TCP (MPTCP) enabled is configured on a virtual server, undisclosed traffic along with conditions

>= 16.1.0 and < 16.1.6

When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase i

>= 15.1.0 and < 15.1.10.8

An HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to break the max

>= 15.1.0 and < 15.1.10.8

When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman

>= 15.1.0 and <= 15.1.10

When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on

>= 15.1.0 and <= 15.1.10

When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate. N

>= 15.1.0 and < 15.1.9

When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an in

>= 16.1.0 and < 16.1.6

When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory r

>= 15.1.0 and < 15.1.10.7

When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tm

>= 15.1.0 and < 15.1.10.6

A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an

>= 15.1.0 and <= 15.1.10

When SNMP v1 or v2c are disabled on the BIG-IP, undisclosed requests can cause an increase in memory resource utilization. No

>= 15.1.0 and <= 15.1.10

When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed traffi

>= 15.1.0 and <= 15.1.10

When a BIG-IP message routing profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resou

>= 15.1.0 and <= 15.1.10

When SIP session Application Level Gateway mode (ALG) profile with Passthru Mode enabled and SIP router ALG profile are configured

>= 15.1.0 and < 15.1.10.6

Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticate

>= 15.1.0 and < 15.1.10.5

BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings

>= 15.1.0 and <= 15.1.1

In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV NIC, undiscl

>= 15.1.0 and <= 15.1.1

Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names. Note: Software versions which h

>= 15.1.0 and <= 15.1.1

When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions b

>= 15.1.0 and <= 15.1.1

When a stateless virtual server is configured on BIG-IP system with a High-Speed Bridge (HSB), undisclosed requests can cause TMM

When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.

>= 15.1.0 and < 15.1.10.4

A reflected cross-site scripting (XSS) vulnerability exist in undisclosed page of the BIG-IP Configuration utility that allows an

>= 15.1.0 and < 15.1.10

Under certain conditions, a data leak may occur in the Traffic Management Microkernels (TMMs) of BIG-IP tenants running on VELOS a

>= 15.1.0 and < 15.1.10.4

A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an

>= 15.1.0 and < 15.1.10.4

When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along with

>= 15.1.0 and < 15.1.10.4

A DOM-based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows

>= 15.1.0 and < 15.1.10.8

When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel (TMM) to termina

>= 13.1.0 and <= 13.1.5

An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacke

>= 13.1.0 and <= 13.1.5

Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP syste

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin