F5 Big-IP Application Acceleration Manager (AAM) 11.2.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.2.1:*:*:*:*:*:*:*

part: a version: 11.2.1 update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductBig Ip Application Acceleration Manager (b37a95ea-e315-5ea8-8148-70c941649d16)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-5523 vulnerable 2026-06-08 05:11:51.468028 Details available
On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 and Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced.
Published: 2018-06-01T14:00:00.000Z
Updated: 2024-09-16T17:33:09.067Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5522 vulnerable 2026-06-08 05:11:51.465803 Details available
On F5 BIG-IP 13.0.0, 12.0.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, when processing DIAMETER transactions with carefully crafted attribute-value pairs, TMM may crash.
Published: 2018-06-01T14:00:00.000Z
Updated: 2024-09-17T03:23:04.167Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5521 vulnerable 2026-06-08 05:11:51.464019 Details available
On F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, carefully crafted URLs can be used to reflect arbitrary content into GeoIP lookup responses, potentially exposing clients to XSS.
Published: 2018-06-01T14:00:00.000Z
Updated: 2024-09-17T01:06:55.468Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5506 vulnerable 2026-06-08 05:11:51.331366 Details available
In F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, or 11.2.1 the Apache modules apache_auth_token_mod and mod_auth_f5_auth_token.cpp allow possible unauthenticated bruteforce on the em_server_ip authorization parameter to obtain which SSL client certificates used for mutual authentication between BIG-IQ or Enterprise Manager (EM) and managed BIG-IP devices.
Published: 2018-04-13T13:00:00.000Z
Updated: 2024-09-16T19:10:30.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5501 vulnerable 2026-06-08 05:11:51.304830 Details available
In some circumstances, on F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, any 11.6.x or 11.5.x release, or 11.2.1, TCP DNS profile allows excessive buffering due to lack of flow control.
Published: 2018-03-01T16:00:00.000Z
Updated: 2024-09-17T02:37:02.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6162 vulnerable 2026-06-08 05:09:50.830524 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6161 vulnerable 2026-06-08 05:09:50.804050 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6158 vulnerable 2026-06-08 05:09:50.784086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6156 vulnerable 2026-06-08 05:09:50.774518 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6155 vulnerable 2026-06-08 05:09:50.766397 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6153 vulnerable 2026-06-08 05:09:50.744675 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.