Ssl Orchestrator

Vendor:

First CVE: Apr 6, 2017 · Active for 9 years

27
Total CVEs
More Total CVEs than 96% of tracked products
6.8
Avg CVEs / Year
Higher CVE frequency than 92% of tracked products
7.5
Avg CVSS
Higher Avg CVSS than 49% of tracked products
11.1%
KEV Rate
Higher KEV Rate than 97% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Ssl Orchestrator over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 6, 2017
9 years ago
Most Recent CVE
Mar 31, 2021
1,944 days ago

CVE Severity & Scoring

Ssl Orchestrator27 CVEs
All CVEs352,785 CVEs
MediumHighCritical
Attack Vector
Local1 (3.7%)
Network26 (96.3%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low24 (88.9%)
High3 (11.1%)
Unknown0 (0.0%)
User Interaction
None23 (85.2%)
Unknown0 (0.0%)
Required4 (14.8%)
Privileges Required
Low6 (22.2%)
High3 (11.1%)
None18 (66.7%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (27 CVEs).

27 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2021-22986CRITICAL
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd BIG-IQ 7.1.0.x before 7.1.0.3 and 7.
Mar 31, 20219.899YESYES
CVE-2020-5902CRITICAL
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Co
Jul 1, 20209.899YESYES
CVE-2021-22991CRITICAL
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, undisclosed requests to a virtual serve
Mar 31, 20219.890YESNO
CVE-2021-22992CRITICAL
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, a malicious HTT
Mar 31, 20219.871NONO
CVE-2021-22987CRITICAL
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3 when running in
Mar 31, 20219.936NONO
CVE-2021-22988HIGH
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, TMUI, also refe
Mar 31, 20218.832NONO
CVE-2021-22989CRITICAL
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, when running in
Mar 31, 20219.131NONO
CVE-2021-22990HIGH
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, on systems with
Mar 31, 20217.227NONO
CVE-2021-22999HIGH
On versions 15.0.x before 15.1.0 and 14.1.x before 14.1.4, the BIG-IP system provides an option to connect HTTP/2 clients to HTTP/1.x servers. When a client is slow to accept respo
Mar 31, 20217.524NONO
CVE-2017-6130HIGH
F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) attack when deployed using the Dynamic Domain Bypass (DDB) featur
Apr 6, 20177.424NONO
View all 27 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (27 CVEs).

CISA KEV
3 CVEs
11.1% of CVEs· 97th percentile
Metasploit
2 CVEs
7.4% of CVEs· 97th percentile
Nuclei
2 CVEs
7.4% of CVEs· 97th percentile
ExploitDB
2 CVEs
7.4% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (27 CVEs).

Media Mentions

Signals from CVEs in this product scope (27 CVEs).

Top CNAs Publishing CVEs For Ssl Orchestrator

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
2.017.41.1%00
13.0.015.91.2%00
12.1.5.217.50.9%00
12.1.215.91.2%00
11.6.215.91.2%00