[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXnTKzn60xTmQIq3is2QY3jZWugoOPFJZ07K5a7gTldA":3,"g5a-family:f5\u002Fenterprise_manager":143,"g5a-ex:f5\u002Fenterprise_manager@*":144},{"success":4,"data":5},true,{"product":6,"versions":38,"topVulnerabilitiesByEpss":47,"kevVulnerabilities":108,"seoMetadata":121,"meta":140},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":37},"f5","enterprise_manager",8,38,3,"2020-02-06",[14,19,21,24,26,28,31,34],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"1.0",1,0,false,{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},"2.0",{"version":22,"cve_count":23,"kev_count":17,"has_kev":18},"2.1.0",4,{"version":25,"cve_count":23,"kev_count":17,"has_kev":18},"2.2.0",{"version":27,"cve_count":23,"kev_count":17,"has_kev":18},"2.3.0",{"version":29,"cve_count":30,"kev_count":17,"has_kev":18},"3.0.0",6,{"version":32,"cve_count":33,"kev_count":16,"has_kev":4},"3.1.0",5,{"version":35,"cve_count":36,"kev_count":16,"has_kev":4},"3.1.1",32,"Enterprise Manager by F5 is a technology product with 8 tracked versions and 38 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[39,40,41,42,43,44,45,46],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},{"version":22,"cve_count":23,"kev_count":17,"has_kev":18},{"version":25,"cve_count":23,"kev_count":17,"has_kev":18},{"version":27,"cve_count":23,"kev_count":17,"has_kev":18},{"version":29,"cve_count":30,"kev_count":17,"has_kev":18},{"version":32,"cve_count":33,"kev_count":16,"has_kev":4},{"version":35,"cve_count":36,"kev_count":16,"has_kev":4},[48,56,61,68,75,82,87,93,98,103],{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":53,"severity":54,"isKev":4,"epssScore":55},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,"v3.1","Critical",0.99999,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":52,"cvssVersion":53,"severity":54,"isKev":4,"epssScore":60},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25",0.9994,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":53,"severity":66,"isKev":18,"epssScore":67},"CVE-2019-11479","Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more than if a larger MSS were enforced. A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commits 967c05aee439e6e5d7d805e195b3a20ef5c433d6 and 5f3e2bf008c2221478101ee72f5cb4654b9fc363.","2019-06-19",7.5,"High",0.9166,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"cvssVersion":73,"severity":66,"isKev":18,"epssScore":74},"CVE-2012-1493","F5 BIG-IP appliances 9.x before 9.4.8-HF5, 10.x before 10.2.4, 11.0.x before 11.0.0-HF2, and 11.1.x before 11.1.0-HF3, and Enterprise Manager before 2.1.0-HF2, 2.2.x before 2.2.0-HF1, and 2.3.x before 2.3.0-HF3, use a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins via the PubkeyAuthentication option.","2012-07-09",7.8,"v2",0.63078,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":79,"cvssVersion":53,"severity":80,"isKev":4,"epssScore":81},"CVE-2014-0196","The n_tty_write function in drivers\u002Ftty\u002Fn_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the \"LECHO & !OPOST\" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.","2014-05-07",5.5,"Medium",0.22475,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":72,"cvssVersion":73,"severity":66,"isKev":18,"epssScore":86},"CVE-2015-4047","racoon\u002Fgssapi.c in IPsec-Tools 0.8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon crash) via a series of crafted UDP requests.","2015-05-29",0.0973,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":91,"cvssVersion":73,"severity":54,"isKev":18,"epssScore":92},"CVE-2014-2927","The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before HF7, 11.3.0 before HF9, and 11.2.1 before HF11 and Enterprise Manager 3.x before 3.1.1 HF2, when configured in failover mode, does not require authentication, which allows remote attackers to read or write to arbitrary files via a cmi request to the ConfigSync IP address.","2014-10-15",9.3,0.0792,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":23,"cvssVersion":73,"severity":80,"isKev":18,"epssScore":97},"CVE-2015-4040","Directory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and Enterprise Manager 3.0.0 through 3.1.1 allows remote authenticated users to access arbitrary files in the web root via unspecified vectors.","2015-09-17",0.06756,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":65,"cvssVersion":53,"severity":66,"isKev":18,"epssScore":102},"CVE-2018-5743","By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, defaults to a conservative value for most servers. Unfortunately, the code which was intended to limit the number of simultaneous connections contained an error which could be exploited to grow the number of simultaneous connections beyond this limit. Versions affected: BIND 9.9.0 -> 9.10.8-P1, 9.11.0 -> 9.11.6, 9.12.0 -> 9.12.4, 9.14.0. BIND 9 Supported Preview Edition versions 9.9.3-S1 -> 9.11.5-S3, and 9.11.5-S5. Versions 9.13.0 -> 9.13.7 of the 9.13 development branch are also affected. Versions prior to BIND 9.9.0 have not been evaluated for vulnerability to CVE-2018-5743.","2019-10-09",0.06457,{"cveId":104,"description":105,"publishedDate":106,"cvssScore":65,"cvssVersion":53,"severity":66,"isKev":18,"epssScore":107},"CVE-2018-14880","The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr().","2019-10-03",0.05342,[109,114,119],{"cveId":76,"description":77,"publishedDate":78,"cvssScore":79,"severity":80,"isKev":4,"epssScore":81,"cisaVulnName":110,"cisaDateAdded":111,"cisaShortDescription":112,"cisaRequiredAction":113},"Linux Kernel Race Condition Vulnerability","2023-05-12","Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"severity":54,"isKev":4,"epssScore":55,"cisaVulnName":115,"cisaDateAdded":116,"cisaShortDescription":117,"cisaRequiredAction":118},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","2022-01-28","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.","Apply updates per vendor instructions.",{"cveId":57,"description":58,"publishedDate":59,"cvssScore":52,"severity":54,"isKev":4,"epssScore":60,"cisaVulnName":115,"cisaDateAdded":116,"cisaShortDescription":120,"cisaRequiredAction":118},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"title":122,"metaDescription":123,"keywords":124,"structuredData":125},"Enterprise Manager by F5 - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Enterprise Manager by F5 covering 8 versions with 38 tracked vulnerabilities including 2 critical and 0 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Enterprise Manager vulnerabilities, Enterprise Manager security, Enterprise Manager CVE, F5 Enterprise Manager, Enterprise Manager threat intelligence, F5 security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Enterprise Manager KEV, Enterprise Manager exploited vulnerabilities",{"@context":126,"@type":127,"name":128,"description":123,"url":129,"manufacturer":130,"applicationCategory":134,"softwareVersion":135,"mainEntity":136},"https:\u002F\u002Fschema.org","SoftwareApplication","Enterprise Manager","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ff5\u002Fenterprise_manager",{"@type":131,"name":132,"url":133},"Organization","F5","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ff5","Security Software","8 versions tracked",{"@type":137,"name":138,"description":139,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Enterprise Manager Security Vulnerabilities","Security vulnerabilities affecting Enterprise Manager by F5",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":141,"apiVersion":142},"2026-10-18T20:16:33.159Z","3.0",[],{"rows":145,"total":11,"capped":18,"failed":17},[146,150,156],{"cveId":76,"name":110,"severity":80,"cvss":79,"added":111,"epss":81,"published":147,"ranges":148,"checked":4,"hits":149,"covers":18},"2014-05-07T10:55:04.337",[32,35],[],{"cveId":49,"name":115,"severity":54,"cvss":52,"added":116,"epss":55,"published":151,"ranges":152,"checked":4,"hits":155,"covers":18},"2014-09-24T18:48:04.477",[153,154],"2.1.0 to 2.3.0","3.0.0 to 3.1.1",[],{"cveId":57,"name":115,"severity":54,"cvss":52,"added":116,"epss":60,"published":157,"ranges":158,"checked":4,"hits":159,"covers":18},"2014-09-25T01:55:04.367",[153,154],[]]