Input Validation and Logic

Every one of the 69 is a mark on the map. Named now: 1 to 26, most at risk first.

1. F5 BIG-IP ASM version 12.1.0 - 12.1.1 may allow remote attackers to cause a denial of service (DoS) via a crafted HTTP request.CVE-2016-7472F5 Networks, Inc. · 4.4% likely

   CWE-20

2. In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, 12.0.0 - 12.1.2, 11.6.0 - 11.6.1…CVE-2017-6164F5 Networks, Inc. · 3.9% likely

   CWE-20

3. On F5 BIG-IP 13.1.0-13.1.0.5, maliciously crafted HTTP/2 request frames can lead to denial of service. There is data plane exposure for virtual servers when the HTTP2 profile is e…CVE-2018-5514F5 Networks, Inc. · 3.8% likely

   CWE-20

4. On F5 BIG-IP 13.0.0-13.1.0.5, using RADIUS authentication responses from a RADIUS server with IPv6 addresses may cause TMM to crash, leading to a failover event.CVE-2018-5515F5 Networks, Inc. · 3.1% likely

   CWE-20

5. On F5 BIG-IP versions 13.0.0 or 12.1.0 - 12.1.3.1, when a specifically configured virtual server receives traffic of an undisclosed nature, TMM will crash and take the configured…CVE-2018-5509F5 Networks, Inc. · 2.8% likely

   CWE-20

6. On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed by a Virtual Server with an associated QoE profile that has…CVE-2018-5535F5 Networks, Inc. · 2.6% likely

   CWE-20

7. In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 and 11.5.0 - 11.5.4, an und…CVE-2017-6132F5 Networks, Inc. · 2.5% likely

   CWE-20

8. The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, APM, ASM, GTM, Link Controller, PEM, PSM, and WebSafe 11.6.0 before 11.6.0 HF6, 11.5.0 before 11.5.3 HF2, and…CVE-2016-7476F5 Networks, Inc. · 2.4% likely

   CWE-20

9. On F5 WebSafe Alert Server 1.0.0-4.2.6, a malicious, authenticated user can execute code on the alert server by using a maliciously crafted payload.CVE-2018-5545F5 Networks, Inc. · 2.4% likely

   CWE-20

10. In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, undisclosed HTTP requests may cause a denial of…CVE-2017-6133F5 Networks, Inc. · 2.4% likely

    CWE-20

11. An undisclosed traffic pattern received by a BIG-IP Virtual Server with TCP Fast Open enabled may cause the Traffic Management Microkernel (TMM) to restart, resulting in a Denial-…CVE-2016-9249F5 Networks · 2.0% likely

    CWE-20

12. The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAML Identity Provider with a Service Provider (SP) connector,…CVE-2016-7467F5 Networks · 1.9% likely

    CWE-20

13. Under certain conditions for BIG-IP systems using a virtual server with an associated FastL4 profile and TCP analytics profile, a specific sequence of packets may cause the Traffi…CVE-2016-9247F5 Networks · 1.9% likely

    CWE-20

14. On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed…CVE-2018-15319F5 Networks, Inc. · 1.9% likely

    CWE-20

15. Virtual servers in F5 BIG-IP systems 11.6.1 before 11.6.1 HF1 and 12.1.x before 12.1.2, when configured to parse RADIUS messages via an iRule, allow remote attackers to cause a de…CVE-2016-5024F5 Networks · 1.8% likely

    CWE-20

16. On BIG-IP APM 11.6.0-11.6.3.1, 12.1.0-12.1.3.3, 13.0.0, and 13.1.0-13.1.0.3, APMD may core when processing SAML Assertion or response containing certain elements.CVE-2018-5549F5 Networks, Inc. · 1.8% likely

    CWE-20

17. Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic.CVE-2018-5534F5 Networks, Inc. · 1.8% likely

    CWE-20

18. Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic.CVE-2018-5533F5 Networks, Inc. · 1.8% likely

    CWE-20

19. Under certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles, when the Reassemble IP Fragments option is disabled (default), some specific lar…CVE-2017-6150F5 Networks, Inc. · 1.7% likely

    CWE-20

20. On F5 BIG-IP 13.1.0-13.1.0.5, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service. The control plane is not exposed to…CVE-2018-5517F5 Networks, Inc. · 1.7% likely

    CWE-20

21. On F5 BIG-IP versions 13.0.0 - 13.1.0.3 or 12.0.0 - 12.1.3.1, TMM may restart when processing a specifically crafted page through a virtual server with an associated PEM policy th…CVE-2018-5503F5 Networks, Inc. · 1.7% likely

    CWE-20

22. On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.3, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, a malformed TLS handshake causes TMM to crash leading to a disruption of service.…CVE-2018-5513F5 Networks, Inc. · 1.7% likely

    CWE-20

23. On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, the BIG-IP ASM bd daemon may core dump memory under some circumstances when processing undisclosed type…CVE-2017-6154F5 Networks, Inc. · 1.7% likely

    CWE-20

24. In F5 BIG-IP APM software version 13.0.0 and 12.1.2, in some circumstances, APM tunneled VPN flows can cause a VPN/PPP connflow to be prematurely freed or cause TMM to stop respon…CVE-2017-6129F5 Networks, Inc. · 1.6% likely

    CWE-20

25. On the BIG-IP 2000s, 2200s, 4000s, 4200v, i5600, i5800, i7600, i7800, i10600,i10800, and VIPRION 4450 blades, running version 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.…CVE-2017-6140F5 Networks, Inc. · 1.6% likely

    CWE-20

26. In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, malicious requests made to virtual servers…CVE-2017-6138F5 Networks, Inc. · 1.6% likely

    CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.