Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
f5F5F5:K000139404
HistoryMay 08, 2024 - 12:00 a.m.

K000139404 : Quarterly Security Notification (May 2024)

2024-05-0800:00:00
my.f5.com
20
security advisory
f5
vulnerabilities
cves
security exposures
big-ip
devcentral

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Security Advisory Description

On May 8, 2024, F5 announced the following security issues. This document is intended to serve as an overview of these vulnerabilities and security exposures to help determine the impact to your F5 devices. You can find the details of each issue in the associated articles.

You can watch the May 2024 Quarterly Security Notification briefing by DevCentral in the following video:

  • High CVEs
  • Medium CVEs
  • Security Exposures

High CVEs

Article (CVE) CVSS score Affected products Affected versions1 Fixes introduced in
K000138636: BIG-IP Configuration utility XSS vulnerability CVE-2024-31156 8.0 BIG-IP (all modules) 17.1.0 - 17.1.1
16.1.0 - 16.1.4
15.1.0 - 15.1.10 17.1.1.3
16.1.4.3
15.1.10.4
K000138732: BIG-IP Next Central Manager OData Injection vulnerability CVE-2024-21793 7.5 BIG-IP Next Central Manager 20.0.1 - 20.1.0 20.2.0
K000138733: BIG-IP Next Central Manager SQL Injection vulnerability CVE-2024-26026 7.5 BIG-IP Next Central Manager 20.0.1 - 20.1.0 20.2.0
K000138728: BIG-IP IPsec vulnerability CVE-2024-33608 7.5 BIG-IP (all modules) 17.1.0 17.1.1
K000139037: TMM vulnerability CVE-2024-25560 7.5 BIG-IP (AFM) 17.1.0
16.1.0 - 16.1.3
15.1.10 17.1.1
16.1.4
BIG-IP Next CNF 1.1.0 - 1.1.1 1.2.0
K000138634: BIG-IP Next Central Manager vulnerability CVE-2024-32049 7.4 BIG-IP Next Central Manager 20.0.1 - 20.0.2 20.1.0
K000138744: BIG-IP APM browser network access VPN client vulnerability CVE-2024-28883 7.4 BIG-IP (APM) 17.1.0
16.1.0 - 16.1.4
15.1.0 - 15.1.10 17.1.1
16.1.4.2
15.1.10.3
APM Clients 7.2.3 - 7.2.4 7.2.4.42

1F5 evaluates only software versions that have not yet reached the End of Technical Support (EoTS) phase of their lifecycle.

2The fixed versions of APM Client introduce a change in behavior. For more information, refer to K000136020: BIG-IP APM EPI blocks VPN connections to HTTP and untrusted HTTPS virtual servers on web browsers.

Medium CVEs

Article (CVE) CVSS score Affected products Affected versions1 Fixes introduced in
K000139012: BIG-IP Next Central Manager vulnerability CVE-2024-33612 6.8 BIG-IP Next Central Manager 20.0.1 - 20.1.0 20.2.02
K000139217: BIG-IP TMM tenants on VELOS and rSeries vulnerability CVE-2024-32761 6.5 BIG-IP (all modules) 15.1.0 - 15.1.9 15.1.10
K000138894: BIG-IP Configuration utility XSS vulnerability CVE-2024-33604 6.1 BIG-IP (all modules) 17.1.0 - 17.1.1
16.1.0 - 16.1.4
15.1.0 - 15.1.10 17.1.1.3
16.1.4.3
15.1.10.4
K000138912: BIG-IP SSL vulnerability CVE-2024-28889 5.9 BIG-IP (all modules) 17.1.0 - 17.1.1
16.1.2.1 - 16.1.4
15.1.5 - 15.1.10 17.1.1.3
16.1.4.3
15.1.10.4
K000138520: BIG-IP Configuration utility vulnerability CVE-2024-27202 4.7 BIG-IP (all modules) 17.1.0 - 17.1.1
16.1.0 - 16.1.4
15.1.0 - 15.1.10 17.1.1.3
16.1.4.3
15.1.10.4
K000138913: BIG-IP Next CNF vulnerability CVE-2024-28132 4.4 BIG-IP Next CNF 1.2.0 - 1.2.1 1.3.0

1F5 evaluates only software versions that have not yet reached the End of Technical Support (EoTS) phase of their lifecycle.

2When running the fixed BIG-IP Next Central Manager version 20.2.0 for F5OS type providers (F5 VELOS/Chassis partitions or rSeries) ensure that the TLS certificate used by these F5OS systems has well-formed Subject Alternative Names (SAN).

Security Exposures

Article (Exposure) Affected products Affected versions1 Fixes introduced in

K000132430: The BIG-IP system may fail to block HTTP Request Smuggling attacks

| BIG-IP (all modules)| 16.1.0 - 16.1.3
15.1.0 - 15.1.8| 17.1.0
16.1.4
15.1.9
BIG-IP Next SPK| 1.5.0 - 1.6.0| 1.7.0

K11342432: BIG-IP HTTP non-RFC-compliant security exposure

| BIG-IP (Advanced WAF/ASM)| 16.1.0 - 16.1.3
15.1.0 - 15.1.6| 17.1.0
16.1.4
15.1.7
BIG-IP (all other modules)| 16.1.0 - 16.1.2
15.1.0 - 15.1.5| 17.1.0
16.1.2.2
15.1.5.1

K000138898: BIG-IP Advanced WAF/ASM, BIG-IP Next WAF, and NGINX App Protect WAF attack signature check failure

| BIG-IP (Advanced WAF/ASM)| 17.1.0 - 17.1.1
16.1.0 - 16.1.4
15.1.0 - 15.1.10| 17.1.1.3
16.1.4.3
15.1.10.4
BIG-IP Next (WAF)| 20.0.1 - 20.1.0| 20.2.0
NGINX App Protect WAF| 4.0.0 - 4.8.0
3.10.0 - 3.12.2| 4.8.1

1F5 evaluates only software versions that have not yet reached the End of Technical Support (EoTS) phase of their lifecycle.

Affected configurations

Vulners
Node
f5big\-ip_apmMatch15.1.0
OR
f5big\-ip_apmMatch15.1.1
OR
f5big\-ip_apmMatch15.1.10
OR
f5big\-ip_apmMatch15.1.2
OR
f5big\-ip_apmMatch15.1.3
OR
f5big\-ip_apmMatch15.1.4
OR
f5big\-ip_apmMatch15.1.5
OR
f5big\-ip_apmMatch15.1.6
OR
f5big\-ip_apmMatch15.1.7
OR
f5big\-ip_apmMatch15.1.8
OR
f5big\-ip_apmMatch15.1.9
OR
f5big\-ip_apmMatch16.1.0
OR
f5big\-ip_apmMatch16.1.1
OR
f5big\-ip_apmMatch16.1.2
OR
f5big\-ip_apmMatch16.1.3
OR
f5big\-ip_apmMatch16.1.4
OR
f5big\-ip_apmMatch17.1.0
OR
f5big\-ip_apmMatch17.1.1
OR
f5big\-ip_nextMatch20.0.1
OR
f5big\-ip_nextMatch20.0.2
OR
f5big\-ip_nextMatch20.1.0
OR
f5big\-ip_nextMatch20.1.1
OR
f5big\-ip_nextMatch20.2.0
OR
f5big\-ip_nextMatch1.1.0
OR
f5big\-ip_nextMatch1.1.1
OR
f5big\-ip_nextMatch1.2.0
OR
f5big\-ip_nextMatch1.2.1
OR
f5big\-ip_nextMatch1.3.0
OR
f5big\-ip_nextMatch1.1.0
OR
f5big\-ip_nextMatch1.1.1
OR
f5big\-ip_nextMatch1.2.0
OR
f5big\-ip_nextMatch1.2.1
OR
f5big\-ip_nextMatch1.3.0
OR
f5big\-ip_nextMatch1.1.0
OR
f5big\-ip_nextMatch1.1.1
OR
f5big\-ip_nextMatch1.2.0
OR
f5big\-ip_nextMatch1.2.1
OR
f5big\-ip_nextMatch1.3.0
OR
f5big\-ip_ltmMatch20.0.1
OR
f5big\-ip_ltmMatch20.0.2
OR
f5big\-ip_ltmMatch20.1.0
OR
f5big\-ip_ltmMatch20.2.0
OR
f5big\-ip_nextMatch1.5.0
OR
f5big\-ip_nextMatch1.6.0
OR
f5big\-ip_nextMatch1.7.0
OR
f5big\-ip_nextMatch1.7.1
OR
f5big\-ip_nextMatch1.7.2
OR
f5big\-ip_nextMatch1.7.3
OR
f5big\-ip_nextMatch1.7.4
OR
f5big\-ip_nextMatch1.7.5
OR
f5big\-ip_nextMatch1.7.6
OR
f5big\-ip_nextMatch1.7.7
OR
f5big\-ip_nextMatch1.7.8
OR
f5big\-ip_nextMatch1.8.0
OR
f5big\-ip_nextMatch1.8.2
OR
f5big\-ip_nextMatch1.9.0
OR
f5big\-ip_nextMatch1.9.1
OR
f5big\-ip_nextMatch20.0.1
OR
f5big\-ip_nextMatch20.0.2
OR
f5big\-ip_nextMatch20.1.0
OR
f5big\-ip_nextMatch20.2.0
OR
f5big\-ipMatch15.1.0
OR
f5big\-ipMatch15.1.1
OR
f5big\-ipMatch15.1.10
OR
f5big\-ipMatch15.1.2
OR
f5big\-ipMatch15.1.3
OR
f5big\-ipMatch15.1.4
OR
f5big\-ipMatch15.1.5
OR
f5big\-ipMatch15.1.6
OR
f5big\-ipMatch15.1.7
OR
f5big\-ipMatch15.1.8
OR
f5big\-ipMatch15.1.9
OR
f5big\-ip_afmMatch15.1.0
OR
f5big\-ip_afmMatch15.1.1
OR
f5big\-ip_afmMatch15.1.10
OR
f5big\-ip_afmMatch15.1.2
OR
f5big\-ip_afmMatch15.1.3
OR
f5big\-ip_afmMatch15.1.4
OR
f5big\-ip_afmMatch15.1.5
OR
f5big\-ip_afmMatch15.1.6
OR
f5big\-ip_afmMatch15.1.7
OR
f5big\-ip_afmMatch15.1.8
OR
f5big\-ip_afmMatch15.1.9
OR
f5big\-ip_afmMatch16.1.0
OR
f5big\-ip_afmMatch16.1.1
OR
f5big\-ip_afmMatch16.1.2
OR
f5big\-ip_afmMatch16.1.3
OR
f5big\-ip_afmMatch16.1.4
OR
f5big\-ip_afmMatch17.1.0
OR
f5big\-ip_afmMatch17.1.1
OR
f5big\-ip_analyticsMatch15.1.0
OR
f5big\-ip_analyticsMatch15.1.1
OR
f5big\-ip_analyticsMatch15.1.10
OR
f5big\-ip_analyticsMatch15.1.2
OR
f5big\-ip_analyticsMatch15.1.3
OR
f5big\-ip_analyticsMatch15.1.4
OR
f5big\-ip_analyticsMatch15.1.5
OR
f5big\-ip_analyticsMatch15.1.6
OR
f5big\-ip_analyticsMatch15.1.7
OR
f5big\-ip_analyticsMatch15.1.8
OR
f5big\-ip_analyticsMatch15.1.9
OR
f5big\-ip_analyticsMatch16.1.0
OR
f5big\-ip_analyticsMatch16.1.1
OR
f5big\-ip_analyticsMatch16.1.2
OR
f5big\-ip_analyticsMatch16.1.3
OR
f5big\-ip_analyticsMatch16.1.4
OR
f5big\-ip_analyticsMatch17.1.0
OR
f5big\-ip_analyticsMatch17.1.1
OR
f5big\-ip_asmMatch15.1.0
OR
f5big\-ip_asmMatch15.1.1
OR
f5big\-ip_asmMatch15.1.10
OR
f5big\-ip_asmMatch15.1.2
OR
f5big\-ip_asmMatch15.1.3
OR
f5big\-ip_asmMatch15.1.4
OR
f5big\-ip_asmMatch15.1.5
OR
f5big\-ip_asmMatch15.1.6
OR
f5big\-ip_asmMatch15.1.7
OR
f5big\-ip_asmMatch15.1.8
OR
f5big\-ip_asmMatch15.1.9
OR
f5big\-ip_asmMatch16.1.0
OR
f5big\-ip_asmMatch16.1.1
OR
f5big\-ip_asmMatch16.1.2
OR
f5big\-ip_asmMatch16.1.3
OR
f5big\-ip_asmMatch16.1.4
OR
f5big\-ip_asmMatch17.1.0
OR
f5big\-ip_asmMatch17.1.1
OR
f5big\-ip_dnsMatch15.1.0
OR
f5big\-ip_dnsMatch15.1.1
OR
f5big\-ip_dnsMatch15.1.10
OR
f5big\-ip_dnsMatch15.1.2
OR
f5big\-ip_dnsMatch15.1.3
OR
f5big\-ip_dnsMatch15.1.4
OR
f5big\-ip_dnsMatch15.1.5
OR
f5big\-ip_dnsMatch15.1.6
OR
f5big\-ip_dnsMatch15.1.7
OR
f5big\-ip_dnsMatch15.1.8
OR
f5big\-ip_dnsMatch15.1.9
OR
f5big\-ip_dnsMatch16.1.0
OR
f5big\-ip_dnsMatch16.1.1
OR
f5big\-ip_dnsMatch16.1.2
OR
f5big\-ip_dnsMatch16.1.3
OR
f5big\-ip_dnsMatch16.1.4
OR
f5big\-ip_dnsMatch17.1.0
OR
f5big\-ip_dnsMatch17.1.1
OR
f5big\-ipMatch15.1.0
OR
f5big\-ipMatch15.1.1
OR
f5big\-ipMatch15.1.10
OR
f5big\-ipMatch15.1.2
OR
f5big\-ipMatch15.1.3
OR
f5big\-ipMatch15.1.4
OR
f5big\-ipMatch15.1.5
OR
f5big\-ipMatch15.1.6
OR
f5big\-ipMatch15.1.7
OR
f5big\-ipMatch15.1.8
OR
f5big\-ipMatch15.1.9
OR
f5big\-ipMatch16.1.0
OR
f5big\-ipMatch16.1.1
OR
f5big\-ipMatch16.1.2
OR
f5big\-ipMatch16.1.3
OR
f5big\-ipMatch16.1.4
OR
f5big\-ipMatch17.1.0
OR
f5big\-ipMatch17.1.1
OR
f5big\-ip_link_controllerMatch15.1.0
OR
f5big\-ip_link_controllerMatch15.1.1
OR
f5big\-ip_link_controllerMatch15.1.10
OR
f5big\-ip_link_controllerMatch15.1.2
OR
f5big\-ip_link_controllerMatch15.1.3
OR
f5big\-ip_link_controllerMatch15.1.4
OR
f5big\-ip_link_controllerMatch15.1.5
OR
f5big\-ip_link_controllerMatch15.1.6
OR
f5big\-ip_link_controllerMatch15.1.7
OR
f5big\-ip_link_controllerMatch15.1.8
OR
f5big\-ip_link_controllerMatch15.1.9
OR
f5big\-ip_link_controllerMatch16.1.0
OR
f5big\-ip_link_controllerMatch16.1.1
OR
f5big\-ip_link_controllerMatch16.1.2
OR
f5big\-ip_link_controllerMatch16.1.3
OR
f5big\-ip_link_controllerMatch16.1.4
OR
f5big\-ip_link_controllerMatch17.1.0
OR
f5big\-ip_link_controllerMatch17.1.1
OR
f5big\-ip_ltmMatch15.1.0
OR
f5big\-ip_ltmMatch15.1.1
OR
f5big\-ip_ltmMatch15.1.10
OR
f5big\-ip_ltmMatch15.1.2
OR
f5big\-ip_ltmMatch15.1.3
OR
f5big\-ip_ltmMatch15.1.4
OR
f5big\-ip_ltmMatch15.1.5
OR
f5big\-ip_ltmMatch15.1.6
OR
f5big\-ip_ltmMatch15.1.7
OR
f5big\-ip_ltmMatch15.1.8
OR
f5big\-ip_ltmMatch15.1.9
OR
f5big\-ip_ltmMatch16.1.0
OR
f5big\-ip_ltmMatch16.1.1
OR
f5big\-ip_ltmMatch16.1.2
OR
f5big\-ip_ltmMatch16.1.3
OR
f5big\-ip_ltmMatch16.1.4
OR
f5big\-ip_ltmMatch17.1.0
OR
f5big\-ip_ltmMatch17.1.1
OR
f5big\-ip_pemMatch15.1.0
OR
f5big\-ip_pemMatch15.1.1
OR
f5big\-ip_pemMatch15.1.10
OR
f5big\-ip_pemMatch15.1.2
OR
f5big\-ip_pemMatch15.1.3
OR
f5big\-ip_pemMatch15.1.4
OR
f5big\-ip_pemMatch15.1.5
OR
f5big\-ip_pemMatch15.1.6
OR
f5big\-ip_pemMatch15.1.7
OR
f5big\-ip_pemMatch15.1.8
OR
f5big\-ip_pemMatch15.1.9
OR
f5big\-ip_pemMatch16.1.0
OR
f5big\-ip_pemMatch16.1.1
OR
f5big\-ip_pemMatch16.1.2
OR
f5big\-ip_pemMatch16.1.3
OR
f5big\-ip_pemMatch16.1.4
OR
f5big\-ip_pemMatch17.1.0
OR
f5big\-ip_pemMatch17.1.1
OR
f5nginx_agentMatch2.17.0
OR
f5nginx_agentMatch2.18.0
OR
f5nginx_agentMatch2.19.0
OR
f5nginx_agentMatch2.20.0
OR
f5nginx_agentMatch2.20.1
OR
f5nginx_agentMatch2.22.0
OR
f5nginx_agentMatch2.22.1
OR
f5nginx_agentMatch2.23.0
OR
f5nginx_agentMatch2.23.1
OR
f5nginx_agentMatch2.23.2
OR
f5nginx_agentMatch2.23.3
OR
f5nginx_agentMatch2.24.0
OR
f5nginx_agentMatch2.24.1
OR
f5nginx_agentMatch2.25.0
OR
f5nginx_agentMatch2.25.1
OR
f5nginx_agentMatch2.26.0
OR
f5nginx_agentMatch2.26.1
OR
f5nginx_agentMatch2.26.2
OR
f5nginx_agentMatch2.27.0
OR
f5nginx_agentMatch2.28.0
OR
f5nginx_agentMatch2.28.1
OR
f5nginx_agentMatch2.29.0
OR
f5nginx_agentMatch2.30.0
OR
f5nginx_agentMatch2.30.1
OR
f5nginx_agentMatch2.30.2
OR
f5nginx_agentMatch2.30.3
OR
f5nginx_agentMatch2.31.0
OR
f5nginx_agentMatch2.31.1
OR
f5nginx_agentMatch2.31.2
OR
f5nginx_agentMatch2.32.0
OR
f5nginx_agentMatch2.32.1
OR
f5nginx_agentMatch2.32.2
OR
f5nginx_agentMatch2.33.0
OR
f5nginx_api_connectivity_managerMatch1.0.0
OR
f5nginx_api_connectivity_managerMatch1.1.0
OR
f5nginx_api_connectivity_managerMatch1.1.1
OR
f5nginx_api_connectivity_managerMatch1.2.0
OR
f5nginx_api_connectivity_managerMatch1.3.0
OR
f5nginx_api_connectivity_managerMatch1.3.1
OR
f5nginx_api_connectivity_managerMatch1.4.0
OR
f5nginx_api_connectivity_managerMatch1.4.1
OR
f5nginx_api_connectivity_managerMatch1.5.0
OR
f5nginx_api_connectivity_managerMatch1.6.0
OR
f5nginx_api_connectivity_managerMatch1.7.0
OR
f5nginx_api_connectivity_managerMatch1.8.0
OR
f5nginx_api_connectivity_managerMatch1.9.0
OR
f5nginx_api_connectivity_managerMatch1.9.1
OR
f5nginx_api_connectivity_managerMatch1.9.2
OR
f5nginx_app_protectMatch2.1.0
OR
f5nginx_app_protectMatch2.2.0
OR
f5nginx_app_protectMatch2.3.0
OR
f5nginx_app_protectMatch2.4.0
OR
f5nginx_app_protectMatch3.0.0
OR
f5nginx_app_protectMatch3.1.0
OR
f5nginx_app_protectMatch4.0.1
OR
f5nginx_app_protectMatch4.1.0
OR
f5nginx_app_protectMatch4.2.0
OR
f5nginx_app_protectMatch4.3.0
OR
f5nginx_app_protectMatch3.10.0
OR
f5nginx_app_protectMatch3.11.0
OR
f5nginx_app_protectMatch3.12.1
OR
f5nginx_app_protectMatch3.12.2
OR
f5nginx_app_protectMatch4.0.0
OR
f5nginx_app_protectMatch4.1.0
OR
f5nginx_app_protectMatch4.2.0
OR
f5nginx_app_protectMatch4.3.0
OR
f5nginx_app_protectMatch4.4.0
OR
f5nginx_app_protectMatch4.5.0
OR
f5nginx_app_protectMatch4.6.0
OR
f5nginx_app_protectMatch4.7.0
OR
f5nginx_app_protectMatch4.8.0
OR
f5nginx_app_protectMatch4.8.1
OR
f5nginx_app_protectMatch4.9.0
OR
f5nginx_app_protectMatch5.0.0
OR
f5nginx_app_protectMatch5.1.0
OR
f5nginx_controllerMatch3.18.3
OR
f5nginx_controllerMatch3.19.1-APIM
OR
f5nginx_controllerMatch3.19.2-APIM
OR
f5nginx_controllerMatch3.19.3-APIM
OR
f5nginx_controllerMatch3.19.4-APIM
OR
f5nginx_controllerMatch3.19.5-APIM
OR
f5nginx_controllerMatch3.19.6-APIM
OR
f5nginx_controllerMatch3.20.0
OR
f5nginx_controllerMatch3.20.1
OR
f5nginx_controllerMatch3.21.0
OR
f5nginx_controllerMatch3.22.0
OR
f5nginx_controllerMatch3.22.1
OR
f5nginx_controllerMatch3.22.2
OR
f5nginx_controllerMatch3.22.3
OR
f5nginx_controllerMatch3.22.4
OR
f5nginx_controllerMatch3.22.5
OR
f5nginx_controllerMatch3.22.6
OR
f5nginx_controllerMatch3.22.7
OR
f5nginx_controllerMatch3.22.8
OR
f5nginx_controllerMatch3.22.9
OR
f5nginx_ingress_controllerMatch1.12.5
OR
f5nginx_ingress_controllerMatch2.1.2
OR
f5nginx_ingress_controllerMatch2.2.0
OR
f5nginx_ingress_controllerMatch2.2.1
OR
f5nginx_ingress_controllerMatch2.2.2
OR
f5nginx_ingress_controllerMatch2.3.0
OR
f5nginx_ingress_controllerMatch2.4.0
OR
f5nginx_ingress_controllerMatch2.4.1
OR
f5nginx_ingress_controllerMatch2.4.2
OR
f5nginx_ingress_controllerMatch3.0.0
OR
f5nginx_ingress_controllerMatch3.0.1
OR
f5nginx_ingress_controllerMatch3.0.2
OR
f5nginx_ingress_controllerMatch3.1.0
OR
f5nginx_ingress_controllerMatch3.1.1
OR
f5nginx_ingress_controllerMatch3.2.0
OR
f5nginx_ingress_controllerMatch3.2.1
OR
f5nginx_ingress_controllerMatch3.3.0
OR
f5nginx_ingress_controllerMatch3.3.1
OR
f5nginx_ingress_controllerMatch3.4.0
OR
f5nginx_ingress_controllerMatch3.4.1
OR
f5nginx_ingress_controllerMatch3.4.2
OR
f5nginx_ingress_controllerMatch3.5.0
OR
f5nginx_instance_managerMatch2.10.0
OR
f5nginx_instance_managerMatch2.10.1
OR
f5nginx_instance_managerMatch2.11.0
OR
f5nginx_instance_managerMatch2.12.0
OR
f5nginx_instance_managerMatch2.13.0
OR
f5nginx_instance_managerMatch2.13.1
OR
f5nginx_instance_managerMatch2.14.0
OR
f5nginx_instance_managerMatch2.14.1
OR
f5nginx_instance_managerMatch2.15.0
OR
f5nginx_instance_managerMatch2.15.1
OR
f5nginx_instance_managerMatch2.16.0
OR
f5nginx_instance_managerMatch2.2.0
OR
f5nginx_instance_managerMatch2.3.0
OR
f5nginx_instance_managerMatch2.3.1
OR
f5nginx_instance_managerMatch2.4.0
OR
f5nginx_instance_managerMatch2.5.0
OR
f5nginx_instance_managerMatch2.5.1
OR
f5nginx_instance_managerMatch2.6.0
OR
f5nginx_instance_managerMatch2.7.0
OR
f5nginx_instance_managerMatch2.8.0
OR
f5nginx_instance_managerMatch2.9.0
OR
f5nginx_instance_managerMatch2.9.1
OR
f5nginx_security_monitoringMatch1.0.0
OR
f5nginx_security_monitoringMatch1.1.0
OR
f5nginx_security_monitoringMatch1.2.0
OR
f5nginx_security_monitoringMatch1.3.0
OR
f5nginx_security_monitoringMatch1.4.0
OR
f5nginx_security_monitoringMatch1.5.0
OR
f5nginx_security_monitoringMatch1.6.0
OR
f5nginx_security_monitoringMatch1.7.0
OR
f5nginx_security_monitoringMatch1.7.1
OR
f5nginx_plusMatchR26
OR
f5nginx_plusMatchR27
OR
f5nginx_plusMatchR28
OR
f5nginx_plusMatchR29
OR
f5nginx_plusMatchR30
OR
f5nginx_plusMatchR31
OR
f5nginx_service_meshMatch1.1.0
OR
f5nginx_service_meshMatch1.2.0
OR
f5nginx_service_meshMatch1.2.1
OR
f5nginx_service_meshMatch1.3.0
OR
f5nginx_service_meshMatch1.3.1
OR
f5nginx_service_meshMatch1.4.0
OR
f5nginx_service_meshMatch1.4.1
OR
f5nginx_service_meshMatch1.5.0
OR
f5nginx_service_meshMatch1.6.0
OR
f5nginx_service_meshMatch1.7.0
OR
f5nginx_service_meshMatch2.0.0
OR
f5nginxMatch1.27.0
OR
f5nginxMatch1.28.0
OR
f5nginxMatch1.29.0
OR
f5nginxMatch1.29.1
OR
f5nginxMatch1.30.0
OR
f5nginxMatch1.31.0
OR
f5nginxMatch1.31.1
OR
f5nginxMatch1.32.0
OR
f5nginxMatch1.32.1
OR
f5f5os\-aMatch1.3.0
OR
f5f5os\-aMatch1.3.1
OR
f5f5os\-aMatch1.3.2
OR
f5f5os\-aMatch1.4.0
OR
f5f5os\-aMatch1.5.0
OR
f5f5os\-aMatch1.5.1
OR
f5f5os\-aMatch1.5.2
OR
f5f5os\-aMatch1.7.0
OR
f5f5os\-cMatch1.5.0
OR
f5f5os\-cMatch1.5.1
OR
f5f5os\-cMatch1.6.0
OR
f5f5os\-cMatch1.6.1
OR
f5f5os\-cMatch1.6.2
OR
f5big\-iq_centralized_managementMatch8.1.0
OR
f5big\-iq_centralized_managementMatch8.2.0
OR
f5big\-iq_centralized_managementMatch8.3.0
OR
f5big\-ip_ddos_hybrid_defenderMatch15.1.0
OR
f5big\-ip_ddos_hybrid_defenderMatch15.1.1
OR
f5big\-ip_ddos_hybrid_defenderMatch16.1.0
OR
f5big\-ip_ddos_hybrid_defenderMatch17.1.0
OR
f5ssl_orchestratorMatch15.1.0
OR
f5ssl_orchestratorMatch15.1.1
OR
f5ssl_orchestratorMatch15.1.2
OR
f5ssl_orchestratorMatch15.1.9
OR
f5ssl_orchestratorMatch16.1.0
OR
f5ssl_orchestratorMatch16.1.1
OR
f5ssl_orchestratorMatch16.1.3
OR
f5ssl_orchestratorMatch16.1.4
OR
f5ssl_orchestratorMatch17.1.0
OR
f5ssl_orchestratorMatch17.1.1
OR
f5traffix_signaling_delivery_controllerMatch5.1.0
OR
f5traffix_signaling_delivery_controllerMatch5.2.0

Related

wallarmlab 1
thn 1
nvd 13
f5 13
cvelist 13
cve 13
nessus 12
vulnrichment 5
githubexploit 3
wallarmlab
wallarmlab
Vulnerabilities in BIG-IP Next Central Manager allows control of managed devices
2024-05-21 16:56:30
thn
thn
Critical F5 Central Manager Vulnerabilities Allow Enable Full Device Takeover
2024-05-09 06:11:00
nvd
nvd
CVE-2024-33612
2024-05-08 15:15:11
CVE-2024-33604
2024-05-08 15:15:10
CVE-2024-25560
2024-05-08 15:15:08
f5
f5
K000138728 : BIG-IP IPsec vulnerability CVE-2024-33608
2024-05-08 00:00:00
K000139012 : BIG-IP Next Central Manager vulnerability CVE-2024-33612
2024-05-08 00:00:00
K000138913 : BIG-IP Next CNF vulnerability CVE-2024-28132
2024-05-08 00:00:00
cvelist
cvelist
CVE-2024-28889 BIG-IP SSL vulnerability
2024-05-08 15:01:26
CVE-2024-27202 BIG-IP TMUI XSS vulnerability
2024-05-08 15:01:26
CVE-2024-33612 BIG-IP Next Central Manager vulnerability
2024-05-08 15:01:28
cve
cve
CVE-2024-28889
2024-05-08 15:15:09
CVE-2024-31156
2024-05-08 15:15:09
CVE-2024-33612
2024-05-08 15:15:11
nessus
nessus
F5 Networks BIG-IP : BIG-IP IPsec vulnerability (K000138728)
2024-05-15 00:00:00
F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K000138520)
2024-05-15 00:00:00
F5 BIG-IP Next Central Manager 20.0.1 < 20.2.0 OData Injection (K000138732)
2024-05-09 00:00:00
vulnrichment
vulnrichment
CVE-2024-28883 BIG-IP APM browser network access VPN client vulnerability
2024-05-08 15:01:24
CVE-2024-28889 BIG-IP SSL vulnerability
2024-05-08 15:01:26
CVE-2024-27202 BIG-IP TMUI XSS vulnerability
2024-05-08 15:01:26
githubexploit
githubexploit
Exploit for CVE-2024-26026
2024-05-13 22:04:01
Exploit for CVE-2024-21793
2024-05-09 02:31:13
Exploit for CVE-2024-26026
2024-05-09 03:14:14

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON
Related for F5:K000139404
wallarmlab1thn1nvd13f513cvelist13cve13nessus12vulnrichment5githubexploit3