GCVE - cpe:2.3:o:f5:tmos:9.4.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:f5:tmos:9.4.3:*:*:*:*:*:*:*

part: o version: 9.4.3 update: *

Vendor	F5 (`cb05c4a2-e02e-586f-b9d0-d0370178d1e5`)
Product	Tmos (`788e417b-2650-5e89-80bc-8e49f959d080`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-1493`	vulnerable	2026-06-08 05:00:48.984494	Details available F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manager before 2.1.0-HF2, 2.2.x before 2.2.0-HF1, and 2.3.x before 2.3.0-HF3, use a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins via the PubkeyAuthentication option. Published: 2012-07-09T22:00:00.000Z Updated: 2024-09-17T01:20:39.832Z Open on db.gcve.eu Reference links http://support.f5.com/kb/en-us/solutions/public/13000/600/sol13600.html https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/f5_bigip_known_privkey.rb https://www.trustmatta.com/advisories/MATTA-2012-002.txt http://www.theregister.co.uk/2012/06/13/f5_kit_metasploit_exploit/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-6474`	vulnerable	2026-06-08 04:50:55.145469	Details available The management interface in F5 BIG-IP 9.4.3 allows remote authenticated users with Resource Manager privileges to inject arbitrary Perl code via unspecified configuration settings related to Perl EP3 with templates, probably triggering static code injection. Published: 2009-03-16T16:00:00.000Z Updated: 2024-08-07T11:34:45.925Z Open on db.gcve.eu Reference links http://osvdb.org/51116 http://www.securityfocus.com/bid/28639 http://www.securityfocus.com/archive/1/490496/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/49308	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1503`	vulnerable	2026-06-08 04:50:20.839466	Details available Cross-site scripting (XSS) vulnerability in the web management interface in F5 BIG-IP 9.4.3 allows remote attackers to inject arbitrary web script or HTML via (1) the name of a node object, or the (2) sysContact or (3) sysLocation SNMP configuration field, aka "Audit Log XSS." NOTE: these issues might be resultant from cross-site request forgery (CSRF) vulnerabilities. Published: 2008-03-25T19:00:00.000Z Updated: 2024-08-07T08:24:42.278Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/3778 https://exchange.xforce.ibmcloud.com/vulnerabilities/41440 http://www.securityfocus.com/archive/1/489991/100/0/threaded http://www.securityfocus.com/bid/28416	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0265`	vulnerable	2026-06-08 04:50:10.613047	Details available Multiple cross-site scripting (XSS) vulnerabilities in the Search function in the web management interface in F5 BIG-IP 9.4.3 allow remote attackers to inject arbitrary web script or HTML via the SearchString parameter to (1) list_system.jsp, (2) list_pktfilter.jsp, (3) list_ltm.jsp, (4) resources_audit.jsp, and (5) list_asm.jsp in tmui/Control/jspmap/tmui/system/log/; and (6) list.jsp in certain directories. Published: 2008-01-15T19:00:00.000Z Updated: 2024-08-07T07:39:35.049Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1019190 http://www.vupen.com/english/advisories/2008/0181 https://exchange.xforce.ibmcloud.com/vulnerabilities/39632 http://securityreason.com/securityalert/3545 http://secunia.com/advisories/28505	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.