CVE Intelligence

Vulnerabilidades do F5 Ssl Orchestrator

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam F5 Ssl Orchestrator: 5 registro(s), com versões afetadas e correções.
cpe:2.3:a:f5:ssl_orchestrator

CVE-2026-42780 Média · 4.9 CWE-22 13/05/2026
BIG-IP SSL Orchestrator vulnerability
A directory traversal vulnerability exists in BIG-IP SSL Orchestrator that allows an authenticated attacker with high privilege to overwrite, delete or corrupt arbitrary local files.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-41430 Alta · 7.5 CWE-770 15/10/2025
BIG-IP SSL Orchestrator vulnerability
When BIG-IP SSL Orchestrator is enabled, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2021-22991 Crítica · 9.8 KEV Alta · 63 CWE-119 31/03/2021
F5 BIG-IP Traffic Management Microkernel Buffer Overflow
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, undisclosed requests to a virtual server may be incorrectly handled by the Traffic Management Microkernel (TMM) URI normalization, which may trigger a buffer overflow, resulting in a DoS attack. In certain situations, it may theoretically allow bypass of URL based access control or remote code execution (RCE). Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.
CVE-2021-22986 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-918 31/03/2021
F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd BIG-IQ 7.1.0.x before 7.1.0.3 and 7.0.0.x before 7.0.0.2, the iControl REST interface has an unauthenticated remote command execution vulnerability. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.
CVE-2020-5902 Crítica · 9.8 KEV Urgente · 100 Exploit público Ransomware CWE-22 01/07/2020
F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.