F5 SSL Intercept Iapp vulnerabilities

2 CVEs affecting F5 SSL Intercept Iapp, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-6130, published 2017-04-06.

More from F5.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-0305, published 2017-04-06. Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days. F5 SSL Intercept iApp version 1.5.0 - 1.5.7 is vulnerable to an unauthenticated, remote attack that may allow modification of the BIG-IP system configuration, extraction of sensitive system files,…
• CVE-2017-6130, published 2017-04-06. High severity, CVSS 7.4. EPSS: 1.1% chance of exploitation in the next 30 days. F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) attack when deployed using the Dynamic Domain Bypass (DDB) feature feature plus SNAT…