f5 Iworkflow vulnerabilities

4 CVEs affecting f5 Iworkflow, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-5540, published 2018-07-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-5022, published 2016-09-07. Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days. F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1 HF1, and 12.x before 12.0.0 HF3; BIG-IP AAM, AFM, and…
CVE-2017-6128, published 2017-05-01. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. An attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in F5 BIG-IP, Enterprise Manager, BIG-IQ, and iWorkflow.
CVE-2018-5540, published 2018-07-19. Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days. On F5 BIG-IP 13.0.0-13.0.1, 12.1.0-12.1.3.3, 11.6.0-11.6.3.1, or 11.5.1-11.5.6, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.1.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5…
CVE-2018-5516, published 2018-05-02. Medium severity, CVSS 4.7. EPSS: 0.3% chance of exploitation in the next 30 days. On F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.2, or 11.2.1-11.6.3.1, Enterprise Manager 3.1.1, BIG-IQ Centralized Management 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and Orchestration 1.0.0, or F5 iWorkflow…