# Vulnerabilities published in 2018 - [CVE-2018-5659](https://insights.sbomify.com/CVE-2018-5659/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-5658](https://insights.sbomify.com/CVE-2018-5658/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-5657](https://insights.sbomify.com/CVE-2018-5657/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-5656](https://insights.sbomify.com/CVE-2018-5656/): Cross-site request forgery in n/a (high 8.8) - [CVE-2018-5655](https://insights.sbomify.com/CVE-2018-5655/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-5654](https://insights.sbomify.com/CVE-2018-5654/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-5653](https://insights.sbomify.com/CVE-2018-5653/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-5652](https://insights.sbomify.com/CVE-2018-5652/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-5651](https://insights.sbomify.com/CVE-2018-5651/): Cross-site scripting in n/a (medium 4.8) - [CVE-2018-5650](https://insights.sbomify.com/CVE-2018-5650/): Denial of service in n/a (medium 5.5) - [CVE-2018-5560](https://insights.sbomify.com/CVE-2018-5560/): Guardzilla All-In-One Video Security System Hard-Coded Credential (critical 10.0) - [CVE-2018-5559](https://insights.sbomify.com/CVE-2018-5559/): Information disclosure in Komand (low 3.4) - [CVE-2018-5553](https://insights.sbomify.com/CVE-2018-5553/): Crestron DGE-100 Console Command Injection (FIXED) (critical 9.8) - [CVE-2018-5552](https://insights.sbomify.com/CVE-2018-5552/): DocuTrac DTISQLInstaller.exe Hard-Coded Salt (low 2.9) - [CVE-2018-5551](https://insights.sbomify.com/CVE-2018-5551/): DocuTrac DTISQLInstaller.exe Hard-Coded Credentials (critical 9.0) - [CVE-2018-5550](https://insights.sbomify.com/CVE-2018-5550/): Cross-site scripting in Epson AirPrint (medium 6.1) - [CVE-2018-5549](https://insights.sbomify.com/CVE-2018-5549/): Denial of service in BIG-IP APM (high 7.5) - [CVE-2018-5548](https://insights.sbomify.com/CVE-2018-5548/): Open redirect in BIG-IP APM (medium 6.1) - [CVE-2018-5547](https://insights.sbomify.com/CVE-2018-5547/): Privilege escalation in BIG-IP APM client for Windows (high 7.8) - [CVE-2018-5546](https://insights.sbomify.com/CVE-2018-5546/): Privilege escalation in BIG-IP APM client for Linux (high 7.8) - [CVE-2018-5545](https://insights.sbomify.com/CVE-2018-5545/): Code injection in F5 WebSafe Alert Server (high 8.8) - [CVE-2018-5544](https://insights.sbomify.com/CVE-2018-5544/): Information disclosure in BIG-IP (APM) (high 7.5) - [CVE-2018-5543](https://insights.sbomify.com/CVE-2018-5543/): Information disclosure in F5 Container Connector (high 8.8) - [CVE-2018-5542](https://insights.sbomify.com/CVE-2018-5542/): Security feature bypass in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (high 8.1) - [CVE-2018-5541](https://insights.sbomify.com/CVE-2018-5541/): Denial of service in BIG-IP (ASM) (high 7.5) - [CVE-2018-5540](https://insights.sbomify.com/CVE-2018-5540/): Privilege escalation in BIG-IP (DNS, GTM) (medium 4.4) - [CVE-2018-5539](https://insights.sbomify.com/CVE-2018-5539/): Denial of service in BIG-IP (ASM) (high 7.5) - [CVE-2018-5538](https://insights.sbomify.com/CVE-2018-5538/): Security feature bypass in BIG-IP (DNS) (low 3.7) - [CVE-2018-5537](https://insights.sbomify.com/CVE-2018-5537/): Denial of service in BIG-IP (LTM, AAM, AFM, APM, ASM, Edge Gateway, GTM, PEM, WebAccelerator, WebSafe) (medium 5.3) - [CVE-2018-5536](https://insights.sbomify.com/CVE-2018-5536/): Denial of service in BIG-IP (APM) (high 7.5) - [CVE-2018-5535](https://insights.sbomify.com/CVE-2018-5535/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (high 7.5) - [CVE-2018-5534](https://insights.sbomify.com/CVE-2018-5534/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (high 7.5) - [CVE-2018-5533](https://insights.sbomify.com/CVE-2018-5533/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (high 7.5) - [CVE-2018-5532](https://insights.sbomify.com/CVE-2018-5532/): Information disclosure in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (medium 5.3) - [CVE-2018-5531](https://insights.sbomify.com/CVE-2018-5531/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (high 7.4) - [CVE-2018-5530](https://insights.sbomify.com/CVE-2018-5530/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, Edge Gateway, PEM, WebSafe) (high 7.5) - [CVE-2018-5529](https://insights.sbomify.com/CVE-2018-5529/): Privilege escalation in BIG-IP APM client for Linux and Mac OSX (high 7.8) - [CVE-2018-5528](https://insights.sbomify.com/CVE-2018-5528/): Denial of service in BIG-IP (APM) (medium 5.3) - [CVE-2018-5527](https://insights.sbomify.com/CVE-2018-5527/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (high 7.5) - [CVE-2018-5526](https://insights.sbomify.com/CVE-2018-5526/): Denial of service in BIG-IP (ASM) (medium 6.5) - [CVE-2018-5525](https://insights.sbomify.com/CVE-2018-5525/): Information disclosure in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (medium 4.3) - [CVE-2018-5524](https://insights.sbomify.com/CVE-2018-5524/): Information disclosure in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, Edge Gateway, FPS, Link Controller, PEM, WebAccelerator) (medium 5.3) - [CVE-2018-5523](https://insights.sbomify.com/CVE-2018-5523/): Security feature bypass in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (high 7.2) - [CVE-2018-5522](https://insights.sbomify.com/CVE-2018-5522/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (medium 5.9) - [CVE-2018-5521](https://insights.sbomify.com/CVE-2018-5521/): Cross-site scripting in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (medium 6.1) - [CVE-2018-5520](https://insights.sbomify.com/CVE-2018-5520/): Security feature bypass in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (medium 4.4) - [CVE-2018-5519](https://insights.sbomify.com/CVE-2018-5519/): Path traversal in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (medium 4.9) - [CVE-2018-5518](https://insights.sbomify.com/CVE-2018-5518/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (medium 5.4) - [CVE-2018-5517](https://insights.sbomify.com/CVE-2018-5517/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (high 7.5) - [CVE-2018-5516](https://insights.sbomify.com/CVE-2018-5516/): Missing authorization in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (medium 4.7) - [CVE-2018-5515](https://insights.sbomify.com/CVE-2018-5515/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (medium 4.4) - [CVE-2018-5514](https://insights.sbomify.com/CVE-2018-5514/): Denial of service in BIG-IP (LTM, AAM, AFM, APM, ASM, Link Controller, PEM, WebAccelerator, WebSafe) (high 7.5) - [CVE-2018-5513](https://insights.sbomify.com/CVE-2018-5513/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (high 7.5) - [CVE-2018-5512](https://insights.sbomify.com/CVE-2018-5512/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (high 7.5) - [CVE-2018-5511](https://insights.sbomify.com/CVE-2018-5511/): Command injection in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (high 7.2) - [CVE-2018-5510](https://insights.sbomify.com/CVE-2018-5510/): Denial of service in BIG-IP (Analytics, LTM, AAM, AFM, APM, ASM, DNS, Edge, Gateway, GTM Link Controller, PEM, WebAccelerator, WebSafe) (high 7.5) - [CVE-2018-5509](https://insights.sbomify.com/CVE-2018-5509/): Denial of service in BIG-IP (LTM, AAM, AFM, APM, ASM, Link Controller, PEM, WebSafe) (high 7.5) - [CVE-2018-5508](https://insights.sbomify.com/CVE-2018-5508/): Denial of service in BIG-IP (PEM) (medium 5.9) - [CVE-2018-5507](https://insights.sbomify.com/CVE-2018-5507/): Other in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (high 7.5) - [CVE-2018-5506](https://insights.sbomify.com/CVE-2018-5506/): Information disclosure in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (critical 9.8) - [CVE-2018-5505](https://insights.sbomify.com/CVE-2018-5505/): Denial of service in BIG-IP (ASM and Analytics) (medium 5.9) - [CVE-2018-5504](https://insights.sbomify.com/CVE-2018-5504/): Memory corruption in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (high 8.1) - [CVE-2018-5503](https://insights.sbomify.com/CVE-2018-5503/): Denial of service in BIG-IP (PEM) (high 7.5) - [CVE-2018-5502](https://insights.sbomify.com/CVE-2018-5502/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (high 7.5) - [CVE-2018-5501](https://insights.sbomify.com/CVE-2018-5501/): Denial of service in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe (medium 5.9) - [CVE-2018-5500](https://insights.sbomify.com/CVE-2018-5500/): Denial of service in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe (medium 5.9) - [CVE-2018-5499](https://insights.sbomify.com/CVE-2018-5499/): Denial of service in ATTO FibreBridge 7500N (high 7.5) - [CVE-2018-5498](https://insights.sbomify.com/CVE-2018-5498/): Denial of service in Clustered Data ONTAP (medium 4.4) - [CVE-2018-5497](https://insights.sbomify.com/CVE-2018-5497/): Information disclosure in Clustered Data ONTAP (medium 4.4) - [CVE-2018-5496](https://insights.sbomify.com/CVE-2018-5496/): Information disclosure in Data ONTAP operating in 7-Mode (medium 4.4) - [CVE-2018-5495](https://insights.sbomify.com/CVE-2018-5495/): Missing authorization in StorageGRID Webscale (critical 9.8) - [CVE-2018-5493](https://insights.sbomify.com/CVE-2018-5493/): Denial of service in ATTO FibreBridge 7500N (high 7.5) - [CVE-2018-5492](https://insights.sbomify.com/CVE-2018-5492/): Code injection in E-Series SANtricity OS Controller Software (critical 9.8) - [CVE-2018-5490](https://insights.sbomify.com/CVE-2018-5490/): Missing authorization in Clustered Data ONTAP (high 8.8) - [CVE-2018-5489](https://insights.sbomify.com/CVE-2018-5489/): Missing authorization in 7-Mode Transition Tool (medium 6.5) - [CVE-2018-5488](https://insights.sbomify.com/CVE-2018-5488/): Code injection in SANtricity Products (critical 9.8) - [CVE-2018-5487](https://insights.sbomify.com/CVE-2018-5487/): Code injection in OnCommand Unified Manager for Linux (critical 9.8) - [CVE-2018-5486](https://insights.sbomify.com/CVE-2018-5486/): Security feature bypass in OnCommand Unified Manager for Linux (high 7.8) - [CVE-2018-5485](https://insights.sbomify.com/CVE-2018-5485/): Privilege escalation in OnCommand Unified Manager for Windows (high 7.8) - [CVE-2018-5482](https://insights.sbomify.com/CVE-2018-5482/): Information disclosure in SnapCenter Server (medium 5.3) - [CVE-2018-5481](https://insights.sbomify.com/CVE-2018-5481/): Security feature bypass in OnCommand Unified Manager for 7-Mode (core package) (high 7.4) - [CVE-2018-5479](https://insights.sbomify.com/CVE-2018-5479/): Cross-site scripting in n/a (medium 6.1) - [CVE-2018-5478](https://insights.sbomify.com/CVE-2018-5478/): Contao Cross-site Scripting vulnerabililty (medium 6.1) - [CVE-2018-5477](https://insights.sbomify.com/CVE-2018-5477/): Information disclosure in ABB netCADOPS Web Application (medium 5.8) - [CVE-2018-5476](https://insights.sbomify.com/CVE-2018-5476/): Memory corruption in Delta Electronics Delta Industrial Automation DOPSoft (high 7.8) - [CVE-2018-5475](https://insights.sbomify.com/CVE-2018-5475/): Memory corruption in GE D60 Line Distance Relay (critical 9.8) - [CVE-2018-5474](https://insights.sbomify.com/CVE-2018-5474/): Code injection in Philips IntelliSpace Portal (critical 9.8) - [CVE-2018-5473](https://insights.sbomify.com/CVE-2018-5473/): Memory corruption in GE D60 Line Distance Relay (critical 9.8) - [CVE-2018-5472](https://insights.sbomify.com/CVE-2018-5472/): Privilege escalation in Philips IntelliSpace Portal (critical 9.8) - [CVE-2018-5471](https://insights.sbomify.com/CVE-2018-5471/): Information disclosure in Hirschmann Automation and Control GmbH Classic Platform Switches (medium 5.9) - [CVE-2018-5470](https://insights.sbomify.com/CVE-2018-5470/): Privilege escalation in Philips IntelliSpace Portal (high 7.8) - [CVE-2018-5469](https://insights.sbomify.com/CVE-2018-5469/): Auth bypass in Hirschmann Automation and Control GmbH Classic Platform Switches (critical 9.8) - [CVE-2018-5468](https://insights.sbomify.com/CVE-2018-5468/): Auth bypass in Philips IntelliSpace Portal (critical 9.8) - [CVE-2018-5467](https://insights.sbomify.com/CVE-2018-5467/): Information disclosure in Hirschmann Automation and Control GmbH Classic Platform Switches (medium 6.5) - [CVE-2018-5466](https://insights.sbomify.com/CVE-2018-5466/): Weak cryptography in Philips IntelliSpace Portal (high 7.5) - [CVE-2018-5465](https://insights.sbomify.com/CVE-2018-5465/): Auth bypass in Hirschmann Automation and Control GmbH Classic Platform Switches (high 8.8) - [CVE-2018-5464](https://insights.sbomify.com/CVE-2018-5464/): Weak cryptography in Philips IntelliSpace Portal (high 7.5) - [CVE-2018-5463](https://insights.sbomify.com/CVE-2018-5463/): Memory corruption in LCDS - Leão Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA (high 7.8) - [CVE-2018-5462](https://insights.sbomify.com/CVE-2018-5462/): Security feature bypass in Philips IntelliSpace Portal (high 7.5) - [CVE-2018-5461](https://insights.sbomify.com/CVE-2018-5461/): Weak cryptography in Hirschmann Automation and Control GmbH Classic Platform Switches (medium 6.5) --- From sbomify Insights: https://insights.sbomify.com/years/2018/page/32/