Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-5912 State: PUBLISHED Published: 2020-08-26T14:31:13 Last Updated: 2024-08-04T08:47:41.009Z Vendors: n/a Products: BIG-IP Problem Types: DoS Description: In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the restjavad process's dump command does not follow current best coding practices and may overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K12936322
CVE ID: CVE-2020-5913 State: PUBLISHED Published: 2020-08-26T14:03:08 Last Updated: 2024-08-04T08:47:40.797Z Vendors: n/a Products: BIG-IP Problem Types: BIG-IP SSL/TLS CRL vulnerability Description: In versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, the BIG-IP Client or Server SSL profile ignores revoked certificates, even when a valid CRL is present. This impacts SSL/TLS connections and may result in a man-in-the-middle attack on the connections. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K72752002
CVE ID: CVE-2020-5914 State: PUBLISHED Published: 2020-08-26T14:17:16 Last Updated: 2024-08-04T08:47:40.950Z Vendors: n/a Products: BIG-IP ASM Problem Types: DoS Description: In BIG-IP ASM versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, undisclosed server cookie scenario may cause BD to restart under some circumstances. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K37466356
CVE ID: CVE-2020-5915 State: PUBLISHED Published: 2020-08-26T14:28:30 Last Updated: 2024-08-04T08:47:40.764Z Vendors: n/a Products: BIG-IP Problem Types: XSS Description: In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, an undisclosed TMUI page contains a vulnerability which allows a stored XSS when BIG-IP systems are setup in a device trust. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K57214921
CVE ID: CVE-2020-5916 State: PUBLISHED Published: 2020-08-26T14:25:55 Last Updated: 2024-08-04T08:47:40.870Z Vendors: n/a Products: BIG-IP Problem Types: Information leakage Description: In BIG-IP versions 15.1.0-15.1.0.4 and 15.0.0-15.0.1.3 the Certificate Administrator user role and higher privileged roles can perform arbitrary file reads outside of the web root directory. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K29923912
CVE ID: CVE-2020-5917 State: PUBLISHED Published: 2020-08-26T14:06:50 Last Updated: 2024-08-04T08:47:40.928Z Vendors: n/a Products: BIG-IP, BIG-IQ Problem Types: MitM Description: In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2 and BIG-IQ versions 5.2.0-7.0.0, the host OpenSSH servers utilize keys of less than 2048 bits which are no longer considered secure. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K43404629
CVE ID: CVE-2020-5918 State: PUBLISHED Published: 2020-08-26T14:11:34 Last Updated: 2024-08-04T08:47:40.965Z Vendors: n/a Products: BIG-IP Problem Types: DoS Description: In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management Microkernel (TMM) may stop responding when processing Stream Control Transmission Protocol (SCTP) traffic when traffic volume is high. This vulnerability affects TMM by way of a virtual server configured with an SCTP profile. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K26464312
CVE ID: CVE-2020-5919 State: PUBLISHED Published: 2020-08-26T14:22:51 Last Updated: 2024-08-04T08:47:40.878Z Vendors: n/a Products: BIG-IP APM Problem Types: DoS Description: In versions 15.1.0-15.1.0.4, rendering of certain session variables by BIG-IP APM UI-based agents in an access profile configured with Modern customization, may cause the Traffic Management Microkernel (TMM) to stop responding. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K94563369
CVE ID: CVE-2020-5920 State: PUBLISHED Published: 2020-08-26T14:50:34 Last Updated: 2024-08-04T08:47:40.690Z Vendors: n/a Products: BIG-IP AFM Problem Types: SQL injection Description: In versions 15.0.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a vulnerability in the BIG-IP AFM Configuration utility may allow any authenticated BIG-IP user to perform a read-only blind SQL injection attack. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K25160703
CVE ID: CVE-2020-5921 State: PUBLISHED Published: 2020-08-26T15:21:04 Last Updated: 2024-08-04T08:47:40.924Z Vendors: n/a Products: BIG-IP Problem Types: DoS Description: in BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, Syn flood causes large number of MCPD context messages destined to secondary blades consuming memory leading to MCPD failure. This issue affects only VIPRION hosts with two or more blades installed. Single-blade VIPRION hosts are not affected. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K00103216
CVE ID: CVE-2020-5922 State: PUBLISHED Published: 2020-08-26T14:44:42 Last Updated: 2024-08-04T08:47:40.753Z Vendors: n/a Products: BIG-IP Problem Types: CSRF Description: In BIG-IP versions 15.0.0-15.1.0.4, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, iControl REST does not implement Cross Site Request Forgery protections for users which make use of Basic Authentication in a web browser. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K20606443
CVE ID: CVE-2020-5923 State: PUBLISHED Published: 2020-08-26T14:41:43 Last Updated: 2024-08-04T08:47:41.008Z Vendors: n/a Products: BIG-IP, BIG-IQ Problem Types: Unauthorized access Description: In BIG-IP versions 15.0.0-15.1.0.4, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1 and BIG-IQ versions 5.4.0-7.0.0, Self-IP port-lockdown bypass via IPv6 link-local addresses. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K05975972
CVE ID: CVE-2020-5924 State: PUBLISHED Published: 2020-08-26T14:38:45 Last Updated: 2024-08-04T08:47:40.835Z Vendors: n/a Products: BIG-IP APM Problem Types: DoS Description: In BIG-IP APM versions 12.1.0-12.1.5.1 and 11.6.1-11.6.5.2, RADIUS authentication leaks memory when the username for authentication is not set. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K11400411
CVE ID: CVE-2020-5925 State: PUBLISHED Published: 2020-08-26T15:32:08 Last Updated: 2024-08-04T08:47:40.928Z Vendors: n/a Products: BIG-IP Problem Types: DoS Description: In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, undisclosed internally generated UDP traffic may cause the Traffic Management Microkernel (TMM) to restart under some circumstances. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K45421311
CVE ID: CVE-2020-5926 State: PUBLISHED Published: 2020-08-26T15:43:13 Last Updated: 2024-08-04T08:47:40.856Z Vendors: n/a Products: BIG-IP Problem Types: DoS Description: In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, a BIG-IP virtual server with a Session Initiation Protocol (SIP) ALG profile, parsing SIP messages that contain a multi-part MIME payload with certain boundary strings can cause TMM to free memory to the wrong cache. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K42830212
CVE ID: CVE-2020-5927 State: PUBLISHED Published: 2020-08-26T15:14:25 Last Updated: 2024-08-04T08:47:40.959Z Vendors: n/a Products: BIG-IP ASM Problem Types: XSS Description: In versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, BIG-IP ASM Configuration utility Stored-Cross Site Scripting. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K55873574
CVE ID: CVE-2020-5928 State: PUBLISHED Published: 2020-08-26T15:45:44 Last Updated: 2024-08-04T08:47:40.817Z Vendors: n/a Products: BIG-IP ASM Problem Types: CSRF Description: In versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, BIG-IP ASM Configuration utility CSRF protection token can be reused multiple times. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K40843345
CVE ID: CVE-2020-5929 State: PUBLISHED Published: 2020-09-25T13:22:47 Last Updated: 2024-08-04T08:47:40.873Z Vendors: n/a Products: BIG-IP Problem Types: TLS Oracle Description: In versions 13.0.0-13.0.0 HF2, 12.1.0-12.1.2 HF1, and 11.6.1-11.6.2, BIG-IP platforms with Cavium Nitrox SSL hardware acceleration cards, a Virtual Server configured with a Client SSL profile, and using Anonymous (ADH) or Ephemeral (DHE) Diffie-Hellman key exchange and Single DH use option not enabled in the options list may be vulnerable to crafted SSL/TLS Handshakes that may result with a PMS (Pre-Master Secret) that starts in a 0 byte and may lead to a recovery of plaintext messages as BIG-IP TLS/SSL ADH/DHE sends
-Master Secret) that starts in a 0 byte and may lead to a recovery of plaintext messages as BIG-IP TLS/SSL ADH/DHE sends different error messages acting as an oracle. Similar error messages when PMS starts with 0 byte coupled with very precise timing measurement observation may also expose this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K91158923
CVE ID: CVE-2020-5930 State: PUBLISHED Published: 2020-09-25T13:19:40 Last Updated: 2024-08-04T08:47:40.848Z Vendors: n/a Products: BIG-IP, BIG-IQ Problem Types: DoS Description: In BIG-IP 15.0.0-15.1.0.4, 14.1.0-14.1.2.7, 13.1.0-13.1.3.3, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2 and BIG-IQ 5.2.0-7.1.0, unauthenticated attackers can cause disruption of service via undisclosed methods. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K20622530
CVE ID: CVE-2020-5931 State: PUBLISHED Published: 2020-10-29T15:17:17 Last Updated: 2024-08-04T08:47:40.815Z Vendors: n/a Products: BIG-IP Problem Types: DoS Description: On BIG-IP 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, Virtual servers with a OneConnect profile may incorrectly handle WebSockets related HTTP response headers, causing TMM to restart. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K25400442
CVE ID: CVE-2020-5932 State: PUBLISHED Published: 2020-10-29T15:14:43 Last Updated: 2024-08-04T08:47:40.913Z Vendors: n/a Products: BIG-IP ASM Problem Types: XSS Description: On BIG-IP ASM 15.1.0-15.1.0.5, a cross-site scripting (XSS) vulnerability exists in the BIG-IP ASM Configuration utility response and blocking pages. An authenticated user with administrative privileges can specify a response page with any content, including JavaScript code that will be executed when preview is opened. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K12002065
CVE ID: CVE-2020-5933 State: PUBLISHED Published: 2020-10-29T15:11:39 Last Updated: 2024-08-04T08:47:41.072Z Vendors: n/a Products: BIG-IP Problem Types: DoS Description: On versions 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, when a BIG-IP system that has a virtual server configured with an HTTP compression profile processes compressed HTTP message payloads that require deflation, a Slowloris-style attack can trigger an out-of-memory condition on the BIG-IP system. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K26244025
CVE ID: CVE-2020-5934 State: PUBLISHED Published: 2020-10-29T15:19:45 Last Updated: 2024-08-04T08:47:40.736Z Vendors: n/a Products: BIG-IP APM Problem Types: DoS Description: On BIG-IP APM 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when multiple HTTP requests from the same client to configured SAML Single Logout (SLO) URL are passing through a TCP Keep-Alive connection, traffic to TMM can be disrupted. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K44808538
CVE ID: CVE-2020-5935 State: PUBLISHED Published: 2020-10-29T15:07:59 Last Updated: 2024-08-04T08:47:40.945Z Vendors: n/a Products: BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, FPS, GTM, Link Controller, PEM) Problem Types: DoS Description: On BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, FPS, GTM, Link Controller, PEM) versions 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when handling MQTT traffic through a BIG-IP virtual server associated with an MQTT profile and an iRule performing manipulations on that traffic, TMM may produce a core file. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K62830532
CVE ID: CVE-2020-5936 State: PUBLISHED Published: 2020-10-29T15:21:47 Last Updated: 2024-08-04T08:47:40.960Z Vendors: n/a Products: BIG-IP LTM Problem Types: DoS Description: On BIG-IP LTM 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.1, the Traffic Management Microkernel (TMM) process may consume excessive resources when processing SSL traffic and client authentication are enabled on the client SSL profile. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K44020030
CVE ID: CVE-2020-5937 State: PUBLISHED Published: 2020-10-29T13:32:15 Last Updated: 2024-08-04T08:47:40.904Z Vendors: n/a Products: BIG-IP AFM Problem Types: DoS Description: On BIG-IP AFM 15.1.0-15.1.0.5, the Traffic Management Microkernel (TMM) may produce a core file while processing layer 4 (L4) behavioral denial-of-service (DoS) traffic. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K58290051
CVE ID: CVE-2020-5938 State: PUBLISHED Published: 2020-10-29T13:29:08 Last Updated: 2024-08-04T08:47:40.889Z Vendors: n/a Products: BIG-IP Problem Types: Security downgrade Description: On BIG-IP 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when negotiating IPSec tunnels with configured, authenticated peers, the peer may negotiate a different key length than the BIG-IP configuration would otherwise allow. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K76610106
CVE ID: CVE-2020-5939 State: PUBLISHED Published: 2020-11-05T19:14:16 Last Updated: 2024-08-04T08:47:40.812Z Vendors: n/a Products: BIG-IP Virtual Edition (VE) Problem Types: DoS Description: In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.3, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, and 13.1.0-13.1.3.4, BIG-IP Virtual Edition (VE) systems on VMware, with an Intel-based 85299 Network Interface Controller (NIC) card and Single Root I/O Virtualization (SR-IOV) enabled on vSphere, may fail and leave the Traffic Management Microkernel (TMM) in a state where it cannot transmit traffic. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K75111593
CVE ID: CVE-2020-5940 State: PUBLISHED Published: 2020-11-05T19:20:00 Last Updated: 2024-08-04T08:47:41.006Z Vendors: n/a Products: BIG-IP Problem Types: XSS Description: In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.3, a stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Traffic Management User Interface (TMUI), also known as the BIG-IP Configuration utility. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K43310520
CVE ID: CVE-2020-5941 State: PUBLISHED Published: 2020-11-05T19:18:18 Last Updated: 2024-08-04T08:47:41.007Z Vendors: n/a Products: BIG-IP Problem Types: DoS Description: On BIG-IP versions 16.0.0-16.0.0.1 and 15.1.0-15.1.0.5, using the RESOLV::lookup command within an iRule may cause the Traffic Management Microkernel (TMM) to generate a core file and restart. This issue occurs when data exceeding the maximum limit of a hostname passes to the RESOLV::lookup command. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K03125360
CVE ID: CVE-2020-5942 State: PUBLISHED Published: 2020-11-05T19:15:48 Last Updated: 2024-08-04T08:47:40.719Z Vendors: n/a Products: BIG-IP (PEM) Problem Types: DoS Description: In BIG-IP PEM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when processing Capabilities-Exchange-Answer (CEA) packets with certain attributes from the Policy and Charging Rules Function (PCRF) server, the Traffic Management Microkernel (TMM) may generate a core file and restart. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K82530456
CVE ID: CVE-2020-5943 State: PUBLISHED Published: 2020-11-05T19:23:05 Last Updated: 2024-08-04T08:47:40.910Z Vendors: n/a Products: BIG-IP Problem Types: Information disclosure Description: In versions 14.1.0-14.1.0.1 and 14.1.2.5-14.1.2.7, when a BIG-IP object is created or listed through the REST interface, the protected fields are obfuscated in the REST response, not protected via a SecureVault cryptogram as TMSH does. One example of protected fields is the GTM monitor password. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K20059815
CVE ID: CVE-2020-5944 State: PUBLISHED Published: 2020-11-05T19:24:40 Last Updated: 2024-08-04T08:47:40.887Z Vendors: n/a Products: BIG-IQ Problem Types: DoS Description: In BIG-IQ 7.1.0, accessing the DoS Summary events and DNS Overview pages in the BIG-IQ system interface returns an error message due to disabled Grafana reverse proxy in web service configuration. F5 has done further review of this vulnerability and has re-classified it as a defect. CVE-2020-5944 will continue to be referenced in F5 Security Advisory K57274211 and will not be assigned to other F5 vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K57274211
CVE ID: CVE-2020-5945 State: PUBLISHED Published: 2020-11-05T19:21:24 Last Updated: 2024-08-04T08:47:40.993Z Vendors: n/a Products: BIG-IP Problem Types: XSS Description: In BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, undisclosed TMUI page contains a stored cross site scripting vulnerability (XSS). The issue allows a minor privilege escalation for resource admin to escalate to full admin. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K21540525
CVE ID: CVE-2020-5946 State: PUBLISHED Published: 2020-11-05T19:26:28 Last Updated: 2024-08-04T08:47:41.009Z Vendors: n/a Products: BIG-IP (Advanced WAF, FPS) Problem Types: DoS Description: In BIG-IP Advanced WAF and FPS versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, under some circumstances, certain format client-side alerts sent to the BIG-IP virtual server configured with DataSafe may cause the Traffic Management Microkernel (TMM) to restart, resulting in a Denial-of-Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K53821711
CVE ID: CVE-2020-5947 State: PUBLISHED Published: 2020-11-19T00:14:19 Last Updated: 2024-08-04T08:47:40.986Z Vendors: n/a Products: BIG-IP 2000 series (C112), BIG-IP 4000 series (C113), BIG-IP i2000 series (C117), BIG-IP i4000 series (C115), BIG-IP Virtual Edition (VE) Problem Types: TCP sequence prediction Description: In versions 16.0.0-16.0.0.1 and 15.1.0-15.1.1, on specific BIG-IP platforms, attackers may be able to obtain TCP sequence numbers from the BIG-IP system that can be reused in future connections with the same source and destination port and IP numbers. Only these platforms are affected: BIG-IP 2000 series (C112), BIG-IP 4000 series (C113), BIG-IP i2000 series (C117), BIG-IP i4
hese platforms are affected: BIG-IP 2000 series (C112), BIG-IP 4000 series (C113), BIG-IP i2000 series (C117), BIG-IP i4000 series (C115), BIG-IP Virtual Edition (VE). Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K64571774
CVE ID: CVE-2020-5948 State: PUBLISHED Published: 2020-12-11T18:56:29 Last Updated: 2024-08-04T08:47:40.959Z Vendors: n/a Products: BIG-IP Problem Types: XSS Description: On BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of the BIG-IP system if the victim user is granted the admin role. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K42696541
CVE ID: CVE-2020-5949 State: PUBLISHED Published: 2020-12-11T19:01:52 Last Updated: 2024-08-04T08:47:41.012Z Vendors: n/a Products: BIG-IP Problem Types: DoS Description: On BIG-IP versions 14.0.0-14.0.1 and 13.1.0-13.1.3.4, certain traffic pattern sent to a virtual server configured with an FTP profile can cause the FTP channel to break. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K20984059
CVE ID: CVE-2020-5950 State: PUBLISHED Published: 2020-12-11T18:58:08 Last Updated: 2024-08-04T08:47:40.955Z Vendors: n/a Products: BIG-IP Problem Types: XSS Description: On BIG-IP 14.1.0-14.1.2.6, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of the BIG-IP system if the victim user is granted the admin role. Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K42696541
CVE ID: CVE-2020-5953 State: PUBLISHED Published: 2022-02-03T01:00:57.000Z Last Updated: 2025-11-04T19:12:23.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM (escalating privilege from ring 0 to ring -2). Additional Analyst Notes: - CVE Program Container: References: - https://www.insyde.com/products - https://www.insyde.com/security-pledge - https://cert-portal.siemens.com/productcert/pdf/ssa-3
www.insyde.com/products - https://www.insyde.com/security-pledge - https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf - https://security.netapp.com/advisory/ntap-20220222-0005/
CVE ID: CVE-2020-5955 State: PUBLISHED Published: 2021-11-03T00:19:13 Last Updated: 2024-08-04T08:47:40.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Int15MicrocodeSmm in Insyde InsydeH2O before 2021-10-14 on Intel client chipsets. A caller may be able to escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.insyde.com/products - https://www.insyde.com/security-pledge/SA-2021002 - https://security.netapp.com/advisory/ntap-20220223-0003/