| Package | Affected versions | Patched versions |
|---|---|---|
| big-ip access policy manager | = 11.6.1= 11.6.2= 11.6.3= 11.6.4= 11.6.5= 12.1.0= 12.1.1= 12.1.2= 12.1.3= 12.1.4= 12.1.5= 12.1.6= 13.1.0= 13.1.1= 13.1.3= 13.1.4= 13.1.5= 14.1.0= 14.1.2= 14.1.3= 14.1.4= 15.1.0= 15.1.1= 15.1.2= 15.1.3= 15.1.4= 15.1.5= 16.1.0= 16.1.1= 16.1.2= 17.0.0 | |
| big-ip advanced firewall manager | = 11.6.1= 11.6.2= 11.6.3= 11.6.4= 11.6.5= 12.1.0= 12.1.1= 12.1.2= 12.1.3= 12.1.4= 12.1.5= 12.1.6= 13.1.0= 13.1.1= 13.1.3= 13.1.4= 13.1.5= 14.1.0= 14.1.2= 14.1.3= 14.1.4= 15.1.0= 15.1.1= 15.1.2= 15.1.3= 15.1.4= 15.1.5= 16.1.0= 16.1.1= 16.1.2= 17.0.0 | |
| big-ip analytics | = 11.6.1= 11.6.2= 11.6.3= 11.6.4= 11.6.5= 12.1.0= 12.1.1= 12.1.2= 12.1.3= 12.1.4= 12.1.5= 12.1.6= 13.1.0= 13.1.1= 13.1.3= 13.1.4= 13.1.5= 14.1.0= 14.1.2= 14.1.3= 14.1.4= 15.1.0= 15.1.1= 15.1.2= 15.1.3= 15.1.4= 15.1.5= 16.1.0= 16.1.1= 16.1.2= 17.0.0 | |
| big-ip application acceleration manager | = 11.6.1= 11.6.2= 11.6.3= 11.6.4= 11.6.5= 12.1.0= 12.1.1= 12.1.2= 12.1.3= 12.1.4= 12.1.5= 12.1.6= 13.1.0= 13.1.1= 13.1.3= 13.1.4= 13.1.5= 14.1.0= 14.1.2= 14.1.3= 14.1.4= 15.1.0= 15.1.1= 15.1.2= 15.1.3= 15.1.4= 15.1.5= 16.1.0= 16.1.1= 16.1.2= 17.0.0 | |
| big-ip application security manager | = 11.6.1= 11.6.2= 11.6.3= 11.6.4= 11.6.5= 12.1.0= 12.1.1= 12.1.2= 12.1.3= 12.1.4= 12.1.5= 12.1.6= 13.1.0= 13.1.1= 13.1.3= 13.1.4= 13.1.5= 14.1.0= 14.1.2= 14.1.3= 14.1.4= 15.1.0= 15.1.1= 15.1.2= 15.1.3= 15.1.4= 15.1.5= 16.1.0= 16.1.1= 16.1.2= 17.0.0 | |
| big-ip domain name system | = 11.6.1= 11.6.2= 11.6.3= 11.6.4= 11.6.5= 12.1.0= 12.1.1= 12.1.2= 12.1.3= 12.1.4= 12.1.5= 12.1.6= 13.1.0= 13.1.1= 13.1.3= 13.1.4= 13.1.5= 14.1.0= 14.1.2= 14.1.3= 14.1.4= 15.1.0= 15.1.1= 15.1.2= 15.1.3= 15.1.4= 15.1.5= 16.1.0= 16.1.1= 16.1.2= 17.0.0 | |
| big-ip fraud protection service | = 11.6.1= 11.6.2= 11.6.3= 11.6.4= 11.6.5= 12.1.0= 12.1.1= 12.1.2= 12.1.3= 12.1.4= 12.1.5= 12.1.6= 13.1.0= 13.1.1= 13.1.3= 13.1.4= 13.1.5= 14.1.0= 14.1.2= 14.1.3= 14.1.4= 15.1.0= 15.1.1= 15.1.2= 15.1.3= 15.1.4= 15.1.5= 16.1.0= 16.1.1= 16.1.2= 17.0.0 | |
| big-ip global traffic manager | = 11.6.1= 11.6.2= 11.6.3= 11.6.4= 11.6.5= 12.1.0= 12.1.1= 12.1.2= 12.1.3= 12.1.4= 12.1.5= 12.1.6= 13.1.0= 13.1.1= 13.1.3= 13.1.4= 13.1.5= 14.1.0= 14.1.2= 14.1.3= 14.1.4= 15.1.0= 15.1.1= 15.1.2= 15.1.3= 15.1.4= 15.1.5= 16.1.0= 16.1.1= 16.1.2= 17.0.0 | |
| big-ip link controller | = 11.6.1= 11.6.2= 11.6.3= 11.6.4= 11.6.5= 12.1.0= 12.1.1= 12.1.2= 12.1.3= 12.1.4= 12.1.5= 12.1.6= 13.1.0= 13.1.1= 13.1.3= 13.1.4= 13.1.5= 14.1.0= 14.1.2= 14.1.3= 14.1.4= 15.1.0= 15.1.1= 15.1.2= 15.1.3= 15.1.4= 15.1.5= 16.1.0= 16.1.1= 16.1.2= 17.0.0 | |
| big-ip local traffic manager | = 11.6.1= 11.6.2= 11.6.3= 11.6.4= 11.6.5= 12.1.0= 12.1.1= 12.1.2= 12.1.3= 12.1.4= 12.1.5= 12.1.6= 13.1.0= 13.1.1= 13.1.3= 13.1.4= 13.1.5= 14.1.0= 14.1.2= 14.1.3= 14.1.4= 15.1.0= 15.1.1= 15.1.2= 15.1.3= 15.1.4= 15.1.5= 16.1.0= 16.1.1= 16.1.2= 17.0.0 | |
| big-ip policy enforcement manager | = 11.6.1= 11.6.2= 11.6.3= 11.6.4= 11.6.5= 12.1.0= 12.1.1= 12.1.2= 12.1.3= 12.1.4= 12.1.5= 12.1.6= 13.1.0= 13.1.1= 13.1.3= 13.1.4= 13.1.5= 14.1.0= 14.1.2= 14.1.3= 14.1.4= 15.1.0= 15.1.1= 15.1.2= 15.1.3= 15.1.4= 15.1.5= 16.1.0= 16.1.1= 16.1.2= 17.0.0 |
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a directory traversal vulnerability exists in iControl SOAP that allows an authenticated attacker with at least guest role privileges to read wsdl files in the BIG-IP file system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free