F5 Big-ip Application Acceleration Manager any version

On version 15.1.x before 15.1.0.5, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all versions of 12.1.x and 11.6.x, an authenticated remote command execution vulnerability exists in the BIG-IP Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

On BIG-IP 11.5.2-11.6.4 and Enterprise Manager 3.1.1, REST users with guest privileges may be able to escalate their privileges and run commands with admin privileges.

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, a cross-site request forgery (CSRF) vulnerability in the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, exists in an undisclosed page.

BIG-IP and BIG-IQ Configuration utility vulnerability

BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x and all versions of BIG-IQ 8.x, 7.x, and 6.x are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Appliance mode iControl REST vulnerability

Appliance mode BIG-IP iControl REST and tmsh vulnerability

Appliance mode iControl REST vulnerability

Knowledge Appliance mode iControl REST vulnerability

BIG-IP TMM vulnerability

BIG-IP HSB vulnerability

Appliance mode iControl REST vulnerability

BIG-IP SNMP vulnerability

BIG-IP MPTCP vulnerability

BIG-IP SCP and SFTP vulnerability

BIG-IP Appliance mode external monitor vulnerability

BIG-IP iRules vulnerability

BIG-IP SIP ALG profile vulnerability

BIG-IP HTTP/2 vulnerability

BIG-IP HTTP/2 vulnerability

BIG-IP HTTP vulnerability

SCTP Vulnerability

BIG-IP SIP Vulnerability

BIG-IP SIP MRF Vulnerability

BIG-IP iControl REST and tmsh vulnerability

BIG-IP TMSH vulnerability

BIG-IP IPSec vulnerability

TMM vulnerability

BIG-IP iRules vulnerability

TMM vulnerability

BIG-IP DNS cache vulnerability

BIG-IP Client SSL profile vulnerability

BIG-IP SSL/TLS vulnerability

BIG-IP SSL/TLS vulnerability

BIG-IP Configuration utility vulnerability

BIG-IP SIP profile vulnerability

BIG-IP DTLS Vulnerability

BIG-IP HTTP/2 vulnerability

BIG-IP TMM Vulnerability

BIG-IP PEM iRules vulnerability