F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before…
Priority LOW 34CWE-200Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-200.
Summary
F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP AAM 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP DNS 12.0.0 before build 1.14.628; BIG-IP Edge Gateway, WebAccelerator, and WOM 11.3.0; BIG-IP GTM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, and 11.6.0 before build 6.204.442; BIG-IP PSM 11.3.x and 11.4.x before 11.4.1 build 685-HF10; BIG-IQ Cloud, Device, and Security 4.2.0 through 4.5.0; and BIG-IQ ADC 4.5.0 do not properly regenerate certificates and keys when deploying cloud images in Amazon Web Services (AWS), Azure or Verizon cloud services environments, which allows attackers to obtain sensitive information or cause a denial of service (disruption) by leveraging a target instance configuration.
Why it matters now
EPSS 0.00791 56th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 106
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:f5:big-iq_security:4.2.0:*:*:*:*:*:*:* | 4.2.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-iq_security:4.3.0:*:*:*:*:*:*:* | 4.3.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-iq_security:4.4.0:*:*:*:*:*:*:* | 4.4.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-iq_security:4.5.0:*:*:*:*:*:*:* | 4.5.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_webaccelerator:11.3.0:*:*:*:*:*:*:* | 11.3.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_security_manager:11.3.0:*:*:*:*:*:*:* | 11.3.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_security_manager:11.4.0:*:*:*:*:*:*:* | 11.4.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_security_manager:11.4.1:*:*:*:*:*:*:* | 11.4.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_security_manager:11.5.0:*:*:*:*:*:*:* | 11.5.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1:*:*:*:*:*:*:* | 11.5.1 | Vulnerable | F5 |
- cpe:2.3:a:f5:big-iq_security:4.2.0:*:*:*:*:*:*:* Versions 4.2.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-iq_security:4.3.0:*:*:*:*:*:*:* Versions 4.3.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-iq_security:4.4.0:*:*:*:*:*:*:* Versions 4.4.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-iq_security:4.5.0:*:*:*:*:*:*:* Versions 4.5.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_webaccelerator:11.3.0:*:*:*:*:*:*:* Versions 11.3.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_security_manager:11.3.0:*:*:*:*:*:*:* Versions 11.3.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_security_manager:11.4.0:*:*:*:*:*:*:* Versions 11.4.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_security_manager:11.4.1:*:*:*:*:*:*:* Versions 11.4.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_security_manager:11.5.0:*:*:*:*:*:*:* Versions 11.5.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1:*:*:*:*:*:*:* Versions 11.5.1 Vulnerable ·F5
Show 96 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2:*:*:*:*:*:*:* | 11.5.2 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3:*:*:*:*:*:*:* | 11.5.3 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4:*:*:*:*:*:*:* | 11.5.4 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:* | 11.6.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:* | 12.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.3.0:*:*:*:*:*:*:* | 11.3.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.0:*:*:*:*:*:*:* | 11.4.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.1:*:*:*:*:*:*:* | 11.4.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:* | 11.5.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:* | 11.5.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:* | 11.5.2 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:* | 11.5.3 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4:*:*:*:*:*:*:* | 11.5.4 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:* | 11.6.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:* | 12.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.3.0:*:*:*:*:*:*:* | 11.3.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.0:*:*:*:*:*:*:* | 11.4.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.1:*:*:*:*:*:*:* | 11.4.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0:*:*:*:*:*:*:* | 11.5.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:* | 11.5.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2:*:*:*:*:*:*:* | 11.5.2 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3:*:*:*:*:*:*:* | 11.5.3 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.4:*:*:*:*:*:*:* | 11.5.4 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:* | 11.6.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:* | 12.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-iq_cloud:4.2.0:*:*:*:*:*:*:* | 4.2.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-iq_cloud:4.3.0:*:*:*:*:*:*:* | 4.3.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-iq_cloud:4.4.0:*:*:*:*:*:*:* | 4.4.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-iq_cloud:4.5.0:*:*:*:*:*:*:* | 4.5.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-iq_application_delivery_controller:4.5.0:*:*:*:*:*:*:* | 4.5.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.3.0:*:*:*:*:*:*:* | 11.3.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.0:*:*:*:*:*:*:* | 11.4.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.1:*:*:*:*:*:*:* | 11.4.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.0:*:*:*:*:*:*:* | 11.5.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.1:*:*:*:*:*:*:* | 11.5.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.2:*:*:*:*:*:*:* | 11.5.2 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.3:*:*:*:*:*:*:* | 11.5.3 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.4:*:*:*:*:*:*:* | 11.5.4 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.0:*:*:*:*:*:*:* | 11.6.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_local_traffic_manager:11.3.0:*:*:*:*:*:*:* | 11.3.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.0:*:*:*:*:*:*:* | 11.4.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.1:*:*:*:*:*:*:* | 11.4.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.0:*:*:*:*:*:*:* | 11.5.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1:*:*:*:*:*:*:* | 11.5.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2:*:*:*:*:*:*:* | 11.5.2 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3:*:*:*:*:*:*:* | 11.5.3 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.4:*:*:*:*:*:*:* | 11.5.4 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:* | 11.6.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:* | 12.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-iq_device:4.2.0:*:*:*:*:*:*:* | 4.2.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-iq_device:4.3.0:*:*:*:*:*:*:* | 4.3.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-iq_device:4.4.0:*:*:*:*:*:*:* | 4.4.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-iq_device:4.5.0:*:*:*:*:*:*:* | 4.5.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_edge_gateway:11.3.0:*:*:*:*:*:*:* | 11.3.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.1:*:*:*:*:*:*:* | 11.4.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0:*:*:*:*:*:*:* | 11.5.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:* | 11.5.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2:*:*:*:*:*:*:* | 11.5.2 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3:*:*:*:*:*:*:* | 11.5.3 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.4:*:*:*:*:*:*:* | 11.5.4 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:* | 11.6.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:* | 12.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.3.0:*:*:*:*:*:*:* | 11.3.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.3.0:*:*:*:*:*:*:* | 11.3.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.0:*:*:*:*:*:*:* | 11.4.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.1:*:*:*:*:*:*:* | 11.4.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.0:*:*:*:*:*:*:* | 11.5.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1:*:*:*:*:*:*:* | 11.5.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2:*:*:*:*:*:*:* | 11.5.2 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3:*:*:*:*:*:*:* | 11.5.3 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4:*:*:*:*:*:*:* | 11.5.4 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:* | 11.6.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:* | 12.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_link_controller:11.3.0:*:*:*:*:*:*:* | 11.3.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_link_controller:11.4.0:*:*:*:*:*:*:* | 11.4.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_link_controller:11.4.1:*:*:*:*:*:*:* | 11.4.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_link_controller:11.5.0:*:*:*:*:*:*:* | 11.5.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:* | 11.5.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_link_controller:11.5.2:*:*:*:*:*:*:* | 11.5.2 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_link_controller:11.5.3:*:*:*:*:*:*:* | 11.5.3 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_link_controller:11.5.4:*:*:*:*:*:*:* | 11.5.4 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:* | 11.6.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:* | 12.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_protocol_security_module:11.3.0:*:*:*:*:*:*:* | 11.3.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.0:*:*:*:*:*:*:* | 11.4.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_analytics:11.3.0:*:*:*:*:*:*:* | 11.3.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_analytics:11.4.0:*:*:*:*:*:*:* | 11.4.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_analytics:11.4.1:*:*:*:*:*:*:* | 11.4.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_analytics:11.5.0:*:*:*:*:*:*:* | 11.5.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_analytics:11.5.1:*:*:*:*:*:*:* | 11.5.1 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_analytics:11.5.2:*:*:*:*:*:*:* | 11.5.2 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_analytics:11.5.3:*:*:*:*:*:*:* | 11.5.3 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_analytics:11.5.4:*:*:*:*:*:*:* | 11.5.4 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_analytics:11.6.0:*:*:*:*:*:*:* | 11.6.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_analytics:12.0.0:*:*:*:*:*:*:* | 12.0.0 | Vulnerable | F5 |
| cpe:2.3:a:f5:big-ip_domain_name_system:12.0.0:*:*:*:*:*:*:* | 12.0.0 | Vulnerable | F5 |
- cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2:*:*:*:*:*:*:* Versions 11.5.2 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3:*:*:*:*:*:*:* Versions 11.5.3 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4:*:*:*:*:*:*:* Versions 11.5.4 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:* Versions 11.6.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:* Versions 12.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_access_policy_manager:11.3.0:*:*:*:*:*:*:* Versions 11.3.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.0:*:*:*:*:*:*:* Versions 11.4.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.1:*:*:*:*:*:*:* Versions 11.4.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:* Versions 11.5.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:* Versions 11.5.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:* Versions 11.5.2 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:* Versions 11.5.3 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4:*:*:*:*:*:*:* Versions 11.5.4 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:* Versions 11.6.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:* Versions 12.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.3.0:*:*:*:*:*:*:* Versions 11.3.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.0:*:*:*:*:*:*:* Versions 11.4.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.1:*:*:*:*:*:*:* Versions 11.4.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0:*:*:*:*:*:*:* Versions 11.5.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:* Versions 11.5.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2:*:*:*:*:*:*:* Versions 11.5.2 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3:*:*:*:*:*:*:* Versions 11.5.3 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.4:*:*:*:*:*:*:* Versions 11.5.4 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:* Versions 11.6.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:* Versions 12.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-iq_cloud:4.2.0:*:*:*:*:*:*:* Versions 4.2.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-iq_cloud:4.3.0:*:*:*:*:*:*:* Versions 4.3.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-iq_cloud:4.4.0:*:*:*:*:*:*:* Versions 4.4.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-iq_cloud:4.5.0:*:*:*:*:*:*:* Versions 4.5.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-iq_application_delivery_controller:4.5.0:*:*:*:*:*:*:* Versions 4.5.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_global_traffic_manager:11.3.0:*:*:*:*:*:*:* Versions 11.3.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.0:*:*:*:*:*:*:* Versions 11.4.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_global_traffic_manager:11.4.1:*:*:*:*:*:*:* Versions 11.4.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.0:*:*:*:*:*:*:* Versions 11.5.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.1:*:*:*:*:*:*:* Versions 11.5.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.2:*:*:*:*:*:*:* Versions 11.5.2 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.3:*:*:*:*:*:*:* Versions 11.5.3 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_global_traffic_manager:11.5.4:*:*:*:*:*:*:* Versions 11.5.4 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_global_traffic_manager:11.6.0:*:*:*:*:*:*:* Versions 11.6.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_local_traffic_manager:11.3.0:*:*:*:*:*:*:* Versions 11.3.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.0:*:*:*:*:*:*:* Versions 11.4.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.1:*:*:*:*:*:*:* Versions 11.4.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.0:*:*:*:*:*:*:* Versions 11.5.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1:*:*:*:*:*:*:* Versions 11.5.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2:*:*:*:*:*:*:* Versions 11.5.2 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3:*:*:*:*:*:*:* Versions 11.5.3 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.4:*:*:*:*:*:*:* Versions 11.5.4 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:* Versions 11.6.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:* Versions 12.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-iq_device:4.2.0:*:*:*:*:*:*:* Versions 4.2.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-iq_device:4.3.0:*:*:*:*:*:*:* Versions 4.3.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-iq_device:4.4.0:*:*:*:*:*:*:* Versions 4.4.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-iq_device:4.5.0:*:*:*:*:*:*:* Versions 4.5.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_edge_gateway:11.3.0:*:*:*:*:*:*:* Versions 11.3.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.1:*:*:*:*:*:*:* Versions 11.4.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0:*:*:*:*:*:*:* Versions 11.5.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:* Versions 11.5.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2:*:*:*:*:*:*:* Versions 11.5.2 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3:*:*:*:*:*:*:* Versions 11.5.3 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.4:*:*:*:*:*:*:* Versions 11.5.4 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:* Versions 11.6.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:* Versions 12.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_wan_optimization_manager:11.3.0:*:*:*:*:*:*:* Versions 11.3.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.3.0:*:*:*:*:*:*:* Versions 11.3.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.0:*:*:*:*:*:*:* Versions 11.4.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.4.1:*:*:*:*:*:*:* Versions 11.4.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.0:*:*:*:*:*:*:* Versions 11.5.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1:*:*:*:*:*:*:* Versions 11.5.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2:*:*:*:*:*:*:* Versions 11.5.2 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3:*:*:*:*:*:*:* Versions 11.5.3 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4:*:*:*:*:*:*:* Versions 11.5.4 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:* Versions 11.6.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:* Versions 12.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_link_controller:11.3.0:*:*:*:*:*:*:* Versions 11.3.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_link_controller:11.4.0:*:*:*:*:*:*:* Versions 11.4.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_link_controller:11.4.1:*:*:*:*:*:*:* Versions 11.4.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_link_controller:11.5.0:*:*:*:*:*:*:* Versions 11.5.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:* Versions 11.5.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_link_controller:11.5.2:*:*:*:*:*:*:* Versions 11.5.2 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_link_controller:11.5.3:*:*:*:*:*:*:* Versions 11.5.3 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_link_controller:11.5.4:*:*:*:*:*:*:* Versions 11.5.4 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:* Versions 11.6.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:* Versions 12.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_protocol_security_module:11.3.0:*:*:*:*:*:*:* Versions 11.3.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.0:*:*:*:*:*:*:* Versions 11.4.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_analytics:11.3.0:*:*:*:*:*:*:* Versions 11.3.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_analytics:11.4.0:*:*:*:*:*:*:* Versions 11.4.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_analytics:11.4.1:*:*:*:*:*:*:* Versions 11.4.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_analytics:11.5.0:*:*:*:*:*:*:* Versions 11.5.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_analytics:11.5.1:*:*:*:*:*:*:* Versions 11.5.1 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_analytics:11.5.2:*:*:*:*:*:*:* Versions 11.5.2 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_analytics:11.5.3:*:*:*:*:*:*:* Versions 11.5.3 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_analytics:11.5.4:*:*:*:*:*:*:* Versions 11.5.4 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_analytics:11.6.0:*:*:*:*:*:*:* Versions 11.6.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_analytics:12.0.0:*:*:*:*:*:*:* Versions 12.0.0 Vulnerable ·F5
- cpe:2.3:a:f5:big-ip_domain_name_system:12.0.0:*:*:*:*:*:*:* Versions 12.0.0 Vulnerable ·F5
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2016-2084
- 2026-10-03 Alias added: GHSA-wm5h-q493-j5m6
References
More F5 Big-ip Access Policy Manager vulnerabilities
- TI-2023-25230 BIG-IP Configuration utility unauthenticated remote code execution vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2022-01269 Missing authentication in F5 BIG-IP KEVCVSS 3.1CRITICAL 9.8
- TI-2021-05850 Memory corruption in BIG-IP KEVCVSS 3.1CRITICAL 9.8
- TI-2021-05845 Server-side request forgery in BIG-IP; BIG-IQ KEVCVSS 3.1CRITICAL 9.8
- TI-2020-04820 Path traversal in BIG-IP KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2016-2084 · CVE Program
- CVE-2016-2084 · NVD
- FIRST EPSS
- GHSA-wm5h-q493-j5m6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences