F5 BIG-IP WebSafe 12.1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:f5:big-ip_websafe:12.1.0:*:*:*:*:*:*:*
part: a version: 12.1.0 update: *
| Vendor | F5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5) |
|---|---|
| Product | Big Ip Websafe (7b33cf13-be11-5f60-a723-65050c8cc727) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-6165 |
vulnerable | 2026-06-08 05:09:50.872529 |
Details available
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on VIPRION platforms only, the script which synchronizes SafeNet External Network HSM configuration elements between blades in a clustered deployment will log the HSM partition password in cleartext to the "/var/log/ltm" log file.
Published: 2017-10-20T15:00:00.000Z
Updated: 2024-08-05T15:18:49.774Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6157 |
vulnerable | 2026-06-08 05:09:50.783048 |
Details available
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.5.0 - 11.5.4, virtual servers with a configuration using the HTTP Explicit Proxy functionality and/or SOCKS profile are vulnerable to an unauthenticated, remote attack that allows modification of BIG-IP system configuration, extraction of sensitive system files, and/or possible remote command execution on the BIG-IP system.
Published: 2017-10-27T14:00:00.000Z
Updated: 2024-09-17T03:22:54.063Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6145 |
vulnerable | 2026-06-08 05:09:50.722981 |
Details available
iControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 through 12.1.2 and 13.0.0 includes a service to convert authorization BIGIPAuthCookie cookies to X-F5-Auth-Token tokens. This service does not properly re-validate cookies when making that conversion, allowing once-valid but now expired cookies to be converted to valid tokens.
Published: 2017-10-20T15:00:00.000Z
Updated: 2024-09-16T23:10:40.872Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6141 |
vulnerable | 2026-06-08 05:09:50.713929 |
Details available
In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 through 12.1.2, certain values in a TLS abbreviated handshake when using a client SSL profile with the Session Ticket option enabled may cause disruption of service to the Traffic Management Microkernel (TMM). The Session Ticket option is disabled by default.
Published: 2017-10-20T15:00:00.000Z
Updated: 2024-09-16T22:09:37.413Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6137 |
vulnerable | 2026-06-08 05:09:50.683690 |
Details available
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0 through 12.1.2, undisclosed traffic patterns received while software SYN cookie protection is engaged may cause a disruption of service to the Traffic Management Microkernel (TMM) on specific platforms and configurations.
Published: 2017-05-09T15:00:00.000Z
Updated: 2024-08-05T15:18:49.793Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6131 |
vulnerable | 2026-06-08 05:09:50.624841 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9256 |
vulnerable | 2026-06-08 05:08:23.172818 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9253 |
vulnerable | 2026-06-08 05:08:23.171462 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9252 |
vulnerable | 2026-06-08 05:08:23.156836 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9251 |
vulnerable | 2026-06-08 05:08:23.132883 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9250 |
vulnerable | 2026-06-08 05:08:23.131545 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9249 |
vulnerable | 2026-06-08 05:08:23.109535 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9247 |
vulnerable | 2026-06-08 05:08:23.102286 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9245 |
vulnerable | 2026-06-08 05:08:23.099944 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7474 |
vulnerable | 2026-06-08 05:08:12.777232 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7469 |
vulnerable | 2026-06-08 05:08:12.768834 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-5700 |
vulnerable | 2026-06-08 05:07:57.511656 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.