CVE-2016-2084

CWE-200 — Information Exposure3 documents3 sources

Severity

7.4HIGH

EPSS

0.5%

top 34.77%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

F5 Big-ip Access Policy Manager F5 Big-ip Advanced Firewall Manager F5 Big-ip Analytics +15 more

Timeline

PublishedApr 13

Latest updateMay 17

Description

F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP AAM 11.4.x before 11.4.1 build 685-HF10, 11.5.1 before build 10.104.180, 11.5.2 before 11.5.4 build 0.1.256, 11.6.0 before build 6.204.442, and 12.0.0 before build 1.14.628; BIG-IP DNS 12.0.0 before build 1.14.628; BIG-IP Edge Gateway, WebAccelerato…

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:HExploitability: 2.2 | Impact: 5.2

Affected Packages18 packages

▶NVDf5/big-iq_cloud4 versions+3

▶NVDf5/big-ip_edge_gateway11.3.0

▶NVDf5/big-ip_link_controller10 versions+9

▶NVDf5/big-iq_device4 versions+3

▶NVDf5/big-iq_security4 versions+3

🔴Vulnerability Details

GHSA

GHSA-wm5h-q493-j5m6: F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11↗2022-05-17

▶

CVEList

CVE-2016-2084: F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11↗2016-04-13

▶