Approved changes feed: RSS · Atom

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.2.1:*:*:*:*:*:*:*

part: a version: 11.2.1 update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductBig Ip Advanced Firewall Manager (e9b9e21c-996b-5ec4-9014-0661575a4d57)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-5523 vulnerable 2026-06-08 05:11:51.468273 Details available
On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 and Enterprise Manager 3.1.1, when authenticated administrative users run commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced.
Published: 2018-06-01T14:00:00.000Z
Updated: 2024-09-16T17:33:09.067Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5522 vulnerable 2026-06-08 05:11:51.466188 Details available
On F5 BIG-IP 13.0.0, 12.0.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, when processing DIAMETER transactions with carefully crafted attribute-value pairs, TMM may crash.
Published: 2018-06-01T14:00:00.000Z
Updated: 2024-09-17T03:23:04.167Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5521 vulnerable 2026-06-08 05:11:51.464221 Details available
On F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, carefully crafted URLs can be used to reflect arbitrary content into GeoIP lookup responses, potentially exposing clients to XSS.
Published: 2018-06-01T14:00:00.000Z
Updated: 2024-09-17T01:06:55.468Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5506 vulnerable 2026-06-08 05:11:51.332593 Details available
In F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, or 11.2.1 the Apache modules apache_auth_token_mod and mod_auth_f5_auth_token.cpp allow possible unauthenticated bruteforce on the em_server_ip authorization parameter to obtain which SSL client certificates used for mutual authentication between BIG-IQ or Enterprise Manager (EM) and managed BIG-IP devices.
Published: 2018-04-13T13:00:00.000Z
Updated: 2024-09-16T19:10:30.356Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5501 vulnerable 2026-06-08 05:11:51.305890 Details available
In some circumstances, on F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, any 11.6.x or 11.5.x release, or 11.2.1, TCP DNS profile allows excessive buffering due to lack of flow control.
Published: 2018-03-01T16:00:00.000Z
Updated: 2024-09-17T02:37:02.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6162 vulnerable 2026-06-08 05:09:50.830638 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6161 vulnerable 2026-06-08 05:09:50.804185 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6158 vulnerable 2026-06-08 05:09:50.784119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6156 vulnerable 2026-06-08 05:09:50.774572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6155 vulnerable 2026-06-08 05:09:50.766449 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6153 vulnerable 2026-06-08 05:09:50.747216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9250 vulnerable 2026-06-08 05:08:23.115639 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7469 vulnerable 2026-06-08 05:08:12.742965 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1497 vulnerable 2026-06-08 05:07:31.603122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3959 vulnerable 2026-06-08 05:05:43.646468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.