Iworkflow (F5) - vulnerabilities (CVEs)

17 CVEs, 0 in the last 30 days, 20 known versions, newest CVE from 2020-02-06. Vendor: F5.

CVEs of Iworkflow

CVE-2020-5854 - CVSS 5.9 (medium), 2020-02-06: On BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.0-11.6.5.1, the tmm crashes under certain circumstances…
CVE-2014-5209 - CVSS 5.3 (medium), 2020-01-08: An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious…
CVE-2019-19151 - CVSS 5.5 (medium), 2019-12-23: On BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IQ versions 7.0.0, 6.0.0-6.1.0, and 5.0.0-5.4.0,…
CVE-2019-6665 - CVSS 9.4 (critical), 2019-11-27: On BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1,…
CVE-2019-6663 - CVSS 5.5 (medium), 2019-11-15: The BIG-IP 15.0.0-15.0.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, iWorkflow 2.3.0,…
CVE-2019-6471 - CVSS 5.9 (medium), 2019-10-09: A race condition which may occur when discarding malformed packets can result in BIND exiting due to a REQUIRE assertion failure in dispatch.c. Versions…
CVE-2018-5743 - CVSS 7.5 (high), 2019-10-09: By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable…
CVE-2018-14880 - CVSS 7.5 (high), 2019-10-03: The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().
CVE-2018-14468 - CVSS 7.5 (high), 2019-10-03: The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print().
CVE-2019-6651 - CVSS 5.3 (medium), 2019-09-25: In BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.5.1-11.6.4, BIG-IQ 7.0.0, 6.0.0-6.1.0,5.2.0-5.4.0, iWorkflow 2.3.0,…
CVE-2019-10744 - CVSS 9.1 (critical), 2019-07-26: Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of…
CVE-2019-6642 - CVSS 8.8 (high), 2019-07-01: In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise…
CVE-2019-11479 - CVSS 7.5 (high), 2019-06-19: Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly…
CVE-2018-15328 - CVSS 7.5 (high), 2018-12-12: On BIG-IP 14.0.x, 13.x, 12.x, and 11.x, Enterprise Manager 3.1.1, BIG-IQ 6.x, 5.x, and 4.x, and iWorkflow 2.x, the passphrases for SNMPv3 users and trap…
CVE-2018-15322 - CVSS 6.5 (medium), 2018-10-31: On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 6.0.0-6.0.1, 5.0.0-5.4.0 or…
CVE-2018-15321 - CVSS 4.9 (medium), 2018-10-31: When BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ…
CVE-2018-14634 - CVSS 7.8 (high), 2018-09-25: An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise…