GCVE - cpe:2.3:a:f5:big-ip_websafe:11.2.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:f5:big-ip_websafe:11.2.1:*:*:*:*:*:*:*

part: a version: 11.2.1 update: *

Vendor	F5 (`cb05c4a2-e02e-586f-b9d0-d0370178d1e5`)
Product	Big Ip Websafe (`7b33cf13-be11-5f60-a723-65050c8cc727`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-5522`	vulnerable	2026-06-08 05:11:51.467108	Details available On F5 BIG-IP 13.0.0, 12.0.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, when processing DIAMETER transactions with carefully crafted attribute-value pairs, TMM may crash. Published: 2018-06-01T14:00:00.000Z Updated: 2024-09-17T03:23:04.167Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/104384 https://support.f5.com/csp/article/K54130510	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-5521`	vulnerable	2026-06-08 05:11:51.464734	Details available On F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, carefully crafted URLs can be used to reflect arbitrary content into GeoIP lookup responses, potentially exposing clients to XSS. Published: 2018-06-01T14:00:00.000Z Updated: 2024-09-17T01:06:55.468Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1041021 https://support.f5.com/csp/article/K23124150	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-5506`	vulnerable	2026-06-08 05:11:51.343759	Details available In F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, or 11.2.1 the Apache modules apache_auth_token_mod and mod_auth_f5_auth_token.cpp allow possible unauthenticated bruteforce on the em_server_ip authorization parameter to obtain which SSL client certificates used for mutual authentication between BIG-IQ or Enterprise Manager (EM) and managed BIG-IP devices. Published: 2018-04-13T13:00:00.000Z Updated: 2024-09-16T19:10:30.356Z Open on db.gcve.eu Reference links https://support.f5.com/csp/article/K65355492	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-5501`	vulnerable	2026-06-08 05:11:51.314783	Details available In some circumstances, on F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, any 11.6.x or 11.5.x release, or 11.2.1, TCP DNS profile allows excessive buffering due to lack of flow control. Published: 2018-03-01T16:00:00.000Z Updated: 2024-09-17T02:37:02.573Z Open on db.gcve.eu Reference links https://support.f5.com/csp/article/K44200194 http://www.securityfocus.com/bid/103211	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-6158`	vulnerable	2026-06-08 05:09:50.784497	Details available In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling of invalid IP addresses. Published: 2018-04-13T13:00:00.000Z Updated: 2024-09-17T03:38:50.163Z Open on db.gcve.eu Reference links https://support.f5.com/csp/article/K19361245	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-6156`	vulnerable	2026-06-08 05:09:50.779514	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-6155`	vulnerable	2026-06-08 05:09:50.769860	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.