Vulnerabilities > F5 > BIG IP Access Policy Manager > 11.5.4.4

DATE CVE VULNERABILITY TITLE RISK
2018-04-13 CVE-2017-6158 Unspecified vulnerability in F5 products
In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling of invalid IP addresses.
network
low complexity
f5
6.5
2018-04-13 CVE-2017-6156 Unspecified vulnerability in F5 products
When the F5 BIG-IP 12.1.0-12.1.1, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 system is configured with a wildcard IPSec tunnel endpoint, it may allow a remote attacker to disrupt or impersonate the tunnels that have completed phase 1 IPSec negotiations.
network
high complexity
f5
6.4
2018-04-13 CVE-2017-6155 Unspecified vulnerability in F5 products
On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or HTTP/2 requests may result in a disruption of service to TMM.
network
low complexity
f5
7.5
2018-04-13 CVE-2017-6148 Improper Input Validation vulnerability in F5 products
Responses to SOCKS proxy requests made through F5 BIG-IP version 13.0.0, 12.0.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5 may cause a disruption of services provided by TMM.
network
low complexity
f5 CWE-20
7.5
2017-12-21 CVE-2017-6134 Improper Input Validation vulnerability in F5 products
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, 12.1.0 - 12.1.2 and 11.5.1 - 11.6.1, an undisclosed sequence of packets, sourced from an adjacent network may cause TMM to crash.
low complexity
f5 CWE-20
6.5