F5os-a (F5) - vulnerabilities (CVEs)
17 CVEs, 0 in the last 30 days, 22 known versions, newest CVE from 2025-10-15. Vendor: F5.
CVEs of F5os-a
- CVE-2025-53860 - CVSS 5.6 (medium), 2025-10-15: A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker to access sensitive FIPS hardware security module (HSM)…
- CVE-2025-57780 - CVSS 8.8 (high), 2025-10-15: A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to escalate their privileges. A successful…
- CVE-2025-61955 - CVSS 8.8 (high), 2025-10-15: A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to escalate their privileges. A successful…
- CVE-2025-60015 - CVSS 6.9 (medium), 2025-10-15: An out-of-bounds write vulnerability exists in F5OS-A and F5OS-C that could lead to memory corruption. Note: Software versions which have reached End of…
- CVE-2025-60013 - CVSS 4.6 (medium), 2025-10-15: When a highly-privileged, authenticated attacker attempts to initialize the rSeries FIPS module using a password with special shell metacharacters, arbitrary…
- CVE-2025-47150 - CVSS 7.1 (high), 2025-10-15: When SNMP is configured on F5OS Appliance and Chassis systems, undisclosed requests can cause an increase in SNMP memory resource utilization. Note: Software…
- CVE-2025-46265 - CVSS 8.8 (high), 2025-05-07: On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege…
- CVE-2025-43878 - CVSS 8.3 (high), 2025-05-07: When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode…
- CVE-2025-36546 - CVSS 9.2 (critical), 2025-05-07: On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode;…
- CVE-2024-24966 - CVSS 6.2 (medium), 2024-02-14: When LDAP remote authentication is configured on F5OS, a remote user without an assigned role will be incorrectly authorized. Note: Software versions which…
- CVE-2024-23607 - CVSS 5.5 (medium), 2024-02-14: A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read files outside the QKView directory. Note:…
- CVE-2023-36494 - CVSS 4.4 (medium), 2023-08-02: Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not…
- CVE-2023-22657 - CVSS 7.8 (high), 2023-02-01: On F5OS-A beginning in version 1.2.0 to before 1.3.0 and F5OS-C beginning in version 1.3.0 to before 1.5.0, processing F5OS tenant file names may allow for…
- CVE-2022-41835 - CVSS 8.8 (high), 2022-10-19: In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.5.0, excessive file permissions in F5OS allows an authenticated local attacker to execute…
- CVE-2022-41780 - CVSS 5.5 (medium), 2022-10-19: In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.4.0, a directory traversal vulnerability exists in an undisclosed location of the F5OS CLI…
- CVE-2022-25990 - CVSS 5.3 (medium), 2022-05-05: On 1.0.x versions prior to 1.0.1, systems running F5OS-A software may expose certain registry ports externally. Note: Software versions which have reached End…
- CVE-2002-20001 - CVSS 7.5 (high), 2021-11-11: The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and…
