F5 Big-IP Domain Name System (DNS) 11.2.1
Approved changes feed: RSS · Atom
cpe:2.3:a:f5:big-ip_domain_name_system:11.2.1:*:*:*:*:*:*:*
part: a version: 11.2.1 update: *
| Vendor | F5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5) |
|---|---|
| Product | Big Ip Domain Name System (8a6d754e-8e13-52a2-9940-9d0e301dea7f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-5523 |
vulnerable | 2026-06-08 05:11:51.468797 |
Details available
On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 and Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced.
Published: 2018-06-01T14:00:00.000Z
Updated: 2024-09-16T17:33:09.067Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5522 |
vulnerable | 2026-06-08 05:11:51.466563 |
Details available
On F5 BIG-IP 13.0.0, 12.0.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, when processing DIAMETER transactions with carefully crafted attribute-value pairs, TMM may crash.
Published: 2018-06-01T14:00:00.000Z
Updated: 2024-09-17T03:23:04.167Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5521 |
vulnerable | 2026-06-08 05:11:51.464449 |
Details available
On F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, carefully crafted URLs can be used to reflect arbitrary content into GeoIP lookup responses, potentially exposing clients to XSS.
Published: 2018-06-01T14:00:00.000Z
Updated: 2024-09-17T01:06:55.468Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5506 |
vulnerable | 2026-06-08 05:11:51.345932 |
Details available
In F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, or 11.2.1 the Apache modules apache_auth_token_mod and mod_auth_f5_auth_token.cpp allow possible unauthenticated bruteforce on the em_server_ip authorization parameter to obtain which SSL client certificates used for mutual authentication between BIG-IQ or Enterprise Manager (EM) and managed BIG-IP devices.
Published: 2018-04-13T13:00:00.000Z
Updated: 2024-09-16T19:10:30.356Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6161 |
vulnerable | 2026-06-08 05:09:50.804946 |
Details available
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.0 - 11.6.1, 11.4.0 - 11.5.4, 11.2.1, when ConfigSync is configured, attackers on adjacent networks may be able to bypass the TLS protections usually used to encrypted and authenticate connections to mcpd. This vulnerability may allow remote attackers to cause a denial-of-service (DoS) attack via resource exhaustion.
Published: 2017-10-27T14:00:00.000Z
Updated: 2024-09-16T20:31:33.873Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6158 |
vulnerable | 2026-06-08 05:09:50.784529 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6156 |
vulnerable | 2026-06-08 05:09:50.779568 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6153 |
vulnerable | 2026-06-08 05:09:50.752339 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.