[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3KxqA1hNR3CSUJP9K9gv6AG2BnXZOVvhVpQOybXG8Rg":3,"g5a-ex:f5\u002Ff5os-a@*":151,"g5a-family:f5\u002Ff5os-a":153},{"success":4,"data":5},true,{"product":6,"versions":52,"topVulnerabilitiesByEpss":70,"kevVulnerabilities":128,"seoMetadata":129,"meta":148},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":51},"f5","f5os-a",17,11,0,"2025-10-15",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,49],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.0.0",1,false,{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},"1.0.1",{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},"1.1.0",{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},"1.1.1",{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},"1.2.0",{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},"1.3.0",{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},"1.3.1",{"version":31,"cve_count":11,"kev_count":11,"has_kev":17},"1.3.2",{"version":33,"cve_count":16,"kev_count":11,"has_kev":17},"1.4.0",{"version":35,"cve_count":11,"kev_count":11,"has_kev":17},"1.5.0",{"version":37,"cve_count":11,"kev_count":11,"has_kev":17},"1.5.1",{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},"1.5.2",{"version":41,"cve_count":11,"kev_count":11,"has_kev":17},"1.5.3",{"version":43,"cve_count":11,"kev_count":11,"has_kev":17},"1.5.4",{"version":45,"cve_count":11,"kev_count":11,"has_kev":17},"1.7.0",{"version":47,"cve_count":48,"kev_count":11,"has_kev":17},"1.8.0",4,{"version":50,"cve_count":11,"kev_count":11,"has_kev":17},"1.8.3","F5os-a by F5 is a technology product with 17 tracked versions and 11 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},{"version":31,"cve_count":11,"kev_count":11,"has_kev":17},{"version":33,"cve_count":16,"kev_count":11,"has_kev":17},{"version":35,"cve_count":11,"kev_count":11,"has_kev":17},{"version":37,"cve_count":11,"kev_count":11,"has_kev":17},{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},{"version":41,"cve_count":11,"kev_count":11,"has_kev":17},{"version":43,"cve_count":11,"kev_count":11,"has_kev":17},{"version":45,"cve_count":11,"kev_count":11,"has_kev":17},{"version":47,"cve_count":48,"kev_count":11,"has_kev":17},{"version":50,"cve_count":11,"kev_count":11,"has_kev":17},[71,79,86,92,97,103,108,113,118,124],{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":76,"severity":77,"isKev":17,"epssScore":78},"CVE-2002-20001","The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.","2021-11-11",7.5,"v3.1","High",0.24639,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":76,"severity":84,"isKev":17,"epssScore":85},"CVE-2022-25990","On 1.0.x versions prior to 1.0.1, systems running F5OS-A software may expose certain registry ports externally. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated","2022-05-05",5.3,"Medium",0.00768,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":90,"cvssVersion":76,"severity":84,"isKev":17,"epssScore":91},"CVE-2022-41780","In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.4.0, a directory traversal vulnerability exists in an undisclosed location of the F5OS CLI that allows an attacker to read arbitrary files.","2022-10-19",5.5,0.00526,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":90,"cvssVersion":76,"severity":84,"isKev":17,"epssScore":96},"CVE-2024-23607","\nA directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read files outside the QKView directory.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","2024-02-14",0.00499,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":101,"cvssVersion":76,"severity":77,"isKev":17,"epssScore":102},"CVE-2023-22657","On F5OS-A beginning in version 1.2.0 to before 1.3.0 and F5OS-C beginning in version 1.3.0 to before 1.5.0, processing F5OS tenant file names may allow for command injection.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n","2023-02-01",7.8,0.00443,{"cveId":104,"description":105,"publishedDate":12,"cvssScore":106,"cvssVersion":76,"severity":77,"isKev":17,"epssScore":107},"CVE-2025-61955","A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to escalate their privileges.  A successful exploit may allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",8.8,0.00246,{"cveId":109,"description":110,"publishedDate":12,"cvssScore":111,"cvssVersion":76,"severity":84,"isKev":17,"epssScore":112},"CVE-2025-60015","An out-of-bounds write vulnerability exists in F5OS-A and F5OS-C that could lead to memory corruption. \n\n \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",5.7,0.0021,{"cveId":114,"description":115,"publishedDate":95,"cvssScore":116,"cvssVersion":76,"severity":84,"isKev":17,"epssScore":117},"CVE-2024-24966","\nWhen LDAP remote authentication is configured on F5OS, a remote user without an assigned role will be incorrectly authorized.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",6.2,0.00203,{"cveId":119,"description":120,"publishedDate":121,"cvssScore":122,"cvssVersion":76,"severity":84,"isKev":17,"epssScore":123},"CVE-2023-36494","\nAudit logs on F5OS-A may contain undisclosed sensitive information.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","2023-08-02",4.4,0.00186,{"cveId":125,"description":126,"publishedDate":12,"cvssScore":111,"cvssVersion":76,"severity":84,"isKev":17,"epssScore":127},"CVE-2025-60013","When a user attempts to initialize the rSeries FIPS module using a password with special shell metacharacters, the FIPS hardware security module (HSM) may fail to initialize.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",0.0018,[],{"title":130,"metaDescription":131,"keywords":132,"structuredData":133},"F5os-a by F5 - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for F5os-a by F5 covering 17 versions with 11 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","F5os-a vulnerabilities, F5os-a security, F5os-a CVE, F5 F5os-a, F5os-a threat intelligence, F5 security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":134,"@type":135,"name":136,"description":131,"url":137,"manufacturer":138,"applicationCategory":142,"softwareVersion":143,"mainEntity":144},"https:\u002F\u002Fschema.org","SoftwareApplication","F5os-a","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ff5\u002Ff5os-a",{"@type":139,"name":140,"url":141},"Organization","F5","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ff5","Security Software","17 versions tracked",{"@type":145,"name":146,"description":147,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","F5os-a Security Vulnerabilities","Security vulnerabilities affecting F5os-a by F5",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":149,"apiVersion":150},"2026-10-17T13:31:36.605Z","3.0",{"rows":152,"total":11,"capped":17,"failed":11},[],[]]