Vulnerabilities > F5 > BIG IP Ddos Hybrid Defender > 15.1.0.4

DATE CVE VULNERABILITY TITLE RISK
2020-08-26 CVE-2020-5916 Information Exposure vulnerability in F5 products
In BIG-IP versions 15.1.0-15.1.0.4 and 15.0.0-15.0.1.3 the Certificate Administrator user role and higher privileged roles can perform arbitrary file reads outside of the web root directory.
network
low complexity
f5 CWE-200
4.0
4.0
2020-08-26 CVE-2020-5912 Improper Input Validation vulnerability in F5 products
In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the restjavad process's dump command does not follow current best coding practices and may overwrite arbitrary files.
local
low complexity
f5 CWE-20
3.6
3.6