Vulnerabilities > F5 > BIG IP Fraud Protection Service > 16.1.2

DATE CVE VULNERABILITY TITLE RISK
2022-05-05 CVE-2022-29480 Resource Exhaustion vulnerability in F5 products
On F5 BIG-IP 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when multiple route domains are configured, undisclosed requests to big3d can cause an increase in CPU resource utilization.
network
low complexity
f5 CWE-400
5.0
5.0
2021-11-11 CVE-2002-20001 Resource Exhaustion vulnerability in multiple products
The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack.
network
low complexity
balasys siemens suse f5 hpe stormshield CWE-400
7.5
7.5