Analytics (F5) - vulnerabilities (CVEs)

10 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2019-11-01. Vendor: F5.

CVEs of Analytics

CVE-2019-6657 - CVSS 6.1 (medium), 2019-11-01: On BIG-IP 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, a reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the…
CVE-2019-6626 - CVSS 6.1 (medium), 2019-07-03: On BIG-IP (AFM, Analytics, ASM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.3.4, A reflected cross-site scripting (XSS)…
CVE-2019-6614 - CVSS 6.5 (medium), 2019-05-03: On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, internal methods used to prevent arbitrary file overwrites in Appliance Mode were not fully…
CVE-2019-6617 - CVSS 6.5 (medium), 2019-05-03: On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, a user with the Resource Administrator role is able to…
CVE-2019-6616 - CVSS 7.2 (high), 2019-05-03: On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, administrative users with TMSH access can overwrite critical…
CVE-2019-6615 - CVSS 4.9 (medium), 2019-05-03: On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, Administrator and Resource Administrator roles might exploit…
CVE-2019-6618 - CVSS 4.9 (medium), 2019-05-03: On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, users with the Resource Administrator role can modify sensitive…
CVE-2019-6613 - CVSS 5.3 (medium), 2019-05-03: On BIG-IP 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, SNMP may expose sensitive configuration objects over insecure transmission…
CVE-2019-6611 - CVSS 7.5 (high), 2019-05-03: When BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8 are processing certain rare data sequences occurring in PPTP…
CVE-2019-6610 - CVSS 8.6 (high), 2019-04-11: On BIG-IP versions 14.0.0-14.0.0.4, 13.0.0-13.1.1.1, 12.1.0-12.1.4, 11.6.0-11.6.3.4, and 11.5.1-11.5.8, the system is vulnerable to a denial of service attack…