F5 Networks BIG-IP : BIG-IP APM endpoint inspection vulnerability (K000139656)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.5 / 17.1.2 / Hotfix- BIGIP-15.1.10.6.0.11.6-ENG.iso. It is, therefore, affected by a vulnerability as referenced in the K000139656 advisory. A missing integrity check vulnerability exists in BIG-IP APM access policy...

F5 Networks BIG-IP : BIG-IP message routing vulnerability (K000140947)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.6 / 17.1.2 / Hotfix- BIGIP-15.1.10.6.0.11.6-ENG.iso / Hotfix-BIGIP-16.1.5.2.0.7.5-ENG.iso. It is, therefore, affected by a vulnerability as referenced in the K000140947 advisory. When a BIG-IP message routing profile ...

F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K000140578)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.6 / 16.1.5.2 / 17.1.2. It is, therefore, affected by a vulnerability as referenced in the K000140578 advisory. A stored cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configurati...

F5 Networks BIG-IP : BIG-IP ASM BADoS vulnerability (K000140950)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.5 / 17.1.2 / Hotfix- BIGIP-15.1.10.6.0.11.6-ENG.iso. It is, therefore, affected by a vulnerability as referenced in the K000140950 advisory. When the BIG-IP ASM Behavioral DoS BADoS TLS Signatures feature is configure...

F5 Networks BIG-IP : BIG-IP SNMP vulnerability (K000140933)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.6 / 17.1.2 / Hotfix- BIGIP-15.1.10.6.0.11.6-ENG.iso / Hotfix-BIGIP-16.1.5.2.0.7.5-ENG.iso. It is, therefore, affected by a vulnerability as referenced in the K000140933 advisory. When SNMP v1 or v2c are disabled on th...

F5 Networks BIG-IP : BIG-IP SIP ALG profile vulnerability (K000138932)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.5 / 17.1.2 / Hotfix- BIGIP-15.1.10.6.0.11.6-ENG.iso. It is, therefore, affected by a vulnerability as referenced in the K000138932 advisory. When the Session Initiation Protocol SIP application layer gateway ALG profi...

F5 Networks BIG-IP : BIG-IP PEM vulnerability (K000139778)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.5 / 17.1.2 / Hotfix- BIGIP-15.1.10.6.0.11.6-ENG.iso. It is, therefore, affected by a vulnerability as referenced in the K000139778 advisory. When a BIG-IP PEMControl Plane Listenervirtual server is configured with...

F5 Networks BIG-IP : TMM vulnerability (K000134888)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.6 / 17.1.2 / Hotfix- BIGIP-15.1.10.6.0.11.6-ENG.iso / Hotfix-BIGIP-16.1.5.2.0.7.5-ENG.iso. It is, therefore, affected by a vulnerability as referenced in the K000134888 advisory. When Client SSL or Server SSL profiles...

F5 Networks BIG-IP : BIG-IP iControl REST and tmsh vulnerability (K000148587)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.6 / 16.1.5.2 / 17.1.2.1. It is, therefore, affected by a vulnerability as referenced in the K000148587 advisory. A command injection vulnerability exists in iControl REST and the BIG-IP TMOS Shell tmsh, which may...

F5 Networks BIG-IP : BIG-IP APM access profile vulnerability (K000141003)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.5 / 17.1.2. It is, therefore, affected by a vulnerability as referenced in the K000141003 advisory. When a BIG-IP APM access profile is configured on a virtual server, undisclosed requests can cause the Traffic...

F5 Networks BIG-IP : BIG-IP iControl REST vulnerability (K000138757)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.2. It is, therefore, affected by a vulnerability as referenced in the K000138757 advisory. When running in Appliance mode, and logged into a highly-privileged role, an authenticated remote command injection...

F5 Networks BIG-IP : libssh vulnerabilities (K000149288)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the K000149288 advisory. CVE-2019-3859An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the libssh2packetrequire...

F5 Networks BIG-IP : Qt vulnerability (K000148689)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000148689 advisory. An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network...

F5 Networks BIG-IP : Qt vulnerabilities (K000148809)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3 / 17.5.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the K000148809 advisory. CVE-2023-38197An issue was discovered in Qt before 5.15.15, 6.x before 6.2.10, and 6.3.x through 6.5.x...

F5 Networks BIG-IP : Qt vulnerability (K000148690)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000148690 advisory. In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont munitsPer...

F5 Networks BIG-IP : Qt vulnerability (K000148692)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000148692 advisory. An issue was discovered in Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2. Certificate...

F5 Networks BIG-IP : libssh vulnerability (K000148495)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.4 / 21.0.0. It is, therefore, affected by a vulnerability as referenced in the K000148495 advisory. A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may...

F5 Networks BIG-IP : SQLite vulnerability (K000148494)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000148494 advisory. SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c...

F5 Networks BIG-IP : Linux kernel vulnerability (K000148479)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6 / 17.1.2.2 / 17.5.0. It is, therefore, affected by a vulnerability as referenced in the K000148479 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: do not accept ACK of...

F5 Networks BIG-IP : Diffie-Hellman key exchange protocol vulnerability (K000148343)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000148343 advisory. Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is...