F5 Websafe vulnerabilities

2 CVEs affecting F5 Websafe, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-5209, published 2020-01-08.

More from F5.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-6168, published 2017-11-17. High severity, CVSS 7.4. EPSS: 19.6% chance of exploitation in the next 30 days. On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (fixed in 13.0.0 HF3) a virtual server configured with a Client SSL profile may…
• CVE-2014-5209, published 2020-01-08. Medium severity, CVSS 5.3. EPSS: 2.5% chance of exploitation in the next 30 days. An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive information.