Approved changes feed: RSS · Atom

cpe:2.3:a:f5:big-ip_link_controller:16.0.0:*:*:*:*:*:*:*

part: a version: 16.0.0 update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductBig Ip Link Controller (005525b2-b22c-598e-a149-64bc55184b52)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-5948 vulnerable 2026-06-08 05:26:44.311276 Details available
On BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of the BIG-IP system if the victim user is granted the admin role.
Published: 2020-12-11T18:56:29.000Z
Updated: 2024-08-04T08:47:40.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-13405 vulnerable 2026-06-08 05:10:51.282162 Details available
The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID.
Published: 2018-07-06T14:00:00.000Z
Updated: 2024-08-05T09:00:35.380Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.