F5 iWorkflow 2.3.0
Approved changes feed: RSS · Atom
cpe:2.3:a:f5:iworkflow:2.3.0:*:*:*:*:*:*:*
part: a version: 2.3.0 update: *
| Vendor | F5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5) |
|---|---|
| Product | Iworkflow (cdf1c514-65ac-5960-bc35-e9fc902aebb0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-5854 |
vulnerable | 2026-06-08 05:26:44.047636 |
Details available
On BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.0-11.6.5.1, the tmm crashes under certain circumstances when using the connector profile if a specific sequence of connections are made.
Published: 2020-02-06T15:40:54.000Z
Updated: 2024-08-04T08:39:25.933Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6665 |
vulnerable | 2026-06-08 05:14:12.738990 |
Details available
On BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, an attacker with access to the device communication between the BIG-IP ASM Central Policy Builder and the BIG-IQ/Enterprise Manager/F5 iWorkflow will be able to set up the proxy the same way and intercept the traffic.
Published: 2019-11-27T21:57:58.000Z
Updated: 2024-08-04T20:31:02.519Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6663 |
vulnerable | 2026-06-08 05:14:12.724913 |
Details available
The BIG-IP 15.0.0-15.0.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1 configuration utility is vulnerable to Anti DNS Pinning (DNS Rebinding) attack.
Published: 2019-11-15T20:40:26.000Z
Updated: 2024-08-04T20:31:04.108Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6651 |
vulnerable | 2026-06-08 05:14:12.704921 |
Details available
In BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.5.1-11.6.4, BIG-IQ 7.0.0, 6.0.0-6.1.0,5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, the Configuration utility login page may not follow best security practices when handling a malicious request.
Published: 2019-09-25T17:39:36.000Z
Updated: 2024-08-04T20:23:22.243Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6642 |
vulnerable | 2026-06-08 05:14:12.645604 |
Details available
In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, authenticated users with the ability to upload files (via scp, for example) can escalate their privileges to allow root shell access from within the TMOS Shell (tmsh) interface. The tmsh interface allows users to execute a secondary program via tools like sftp or scp.
Published: 2019-07-01T20:21:01.000Z
Updated: 2024-08-04T20:23:22.538Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6471 |
vulnerable | 2026-06-08 05:14:11.660254 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19151 |
vulnerable | 2026-06-08 05:13:21.573386 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11479 |
vulnerable | 2026-06-08 05:12:37.253072 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10744 |
vulnerable | 2026-06-08 05:12:25.201177 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5743 |
vulnerable | 2026-06-08 05:11:51.769113 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14880 |
vulnerable | 2026-06-08 05:10:53.629656 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14468 |
vulnerable | 2026-06-08 05:10:52.960732 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.