F5 Big-IP Policy Enforcement Manager (PEM) 11.2.1
Approved changes feed: RSS · Atom
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.2.1:*:*:*:*:*:*:*
part: a version: 11.2.1 update: *
| Vendor | F5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5) |
|---|---|
| Product | Big Ip Policy Enforcement Manager (5808f76e-c717-5f06-9b46-34d0fa249f4d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-5523 |
vulnerable | 2026-06-08 05:11:51.469158 |
Details available
On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 and Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced.
Published: 2018-06-01T14:00:00.000Z
Updated: 2024-09-16T17:33:09.067Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5522 |
vulnerable | 2026-06-08 05:11:51.466855 |
Details available
On F5 BIG-IP 13.0.0, 12.0.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, when processing DIAMETER transactions with carefully crafted attribute-value pairs, TMM may crash.
Published: 2018-06-01T14:00:00.000Z
Updated: 2024-09-17T03:23:04.167Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5521 |
vulnerable | 2026-06-08 05:11:51.464585 |
Details available
On F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, carefully crafted URLs can be used to reflect arbitrary content into GeoIP lookup responses, potentially exposing clients to XSS.
Published: 2018-06-01T14:00:00.000Z
Updated: 2024-09-17T01:06:55.468Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5508 |
vulnerable | 2026-06-08 05:11:51.352093 |
Details available
On F5 BIG-IP PEM versions 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.5.1-11.5.5, or 11.2.1, under certain conditions, TMM may crash when processing compressed data though a Virtual Server with an associated PEM profile using the content insertion option.
Published: 2018-04-13T13:00:00.000Z
Updated: 2024-09-17T04:09:05.643Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5506 |
vulnerable | 2026-06-08 05:11:51.341505 |
Details available
In F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, or 11.2.1 the Apache modules apache_auth_token_mod and mod_auth_f5_auth_token.cpp allow possible unauthenticated bruteforce on the em_server_ip authorization parameter to obtain which SSL client certificates used for mutual authentication between BIG-IQ or Enterprise Manager (EM) and managed BIG-IP devices.
Published: 2018-04-13T13:00:00.000Z
Updated: 2024-09-16T19:10:30.356Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5501 |
vulnerable | 2026-06-08 05:11:51.313558 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6162 |
vulnerable | 2026-06-08 05:09:50.831094 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6161 |
vulnerable | 2026-06-08 05:09:50.804818 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6158 |
vulnerable | 2026-06-08 05:09:50.784426 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6156 |
vulnerable | 2026-06-08 05:09:50.777759 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6155 |
vulnerable | 2026-06-08 05:09:50.766697 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-6153 |
vulnerable | 2026-06-08 05:09:50.757629 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.