# Vulnerabilities published in 2019


- [CVE-2019-6681](https://insights.sbomify.com/CVE-2019-6681/): Denial of service in BIG-IP (high 7.5)
- [CVE-2019-6680](https://insights.sbomify.com/CVE-2019-6680/): Denial of service in BIG-IP (high 7.5)
- [CVE-2019-6679](https://insights.sbomify.com/CVE-2019-6679/): Path traversal in BIG-IP (low 3.3)
- [CVE-2019-6678](https://insights.sbomify.com/CVE-2019-6678/): Denial of service in BIG-IP (medium 5.3)
- [CVE-2019-6677](https://insights.sbomify.com/CVE-2019-6677/): Denial of service in BIG-IP (high 7.5)
- [CVE-2019-6676](https://insights.sbomify.com/CVE-2019-6676/): Denial of service in BIG-IP (high 7.5)
- [CVE-2019-6675](https://insights.sbomify.com/CVE-2019-6675/): Auth bypass in BIG-IP (critical 9.8)
- [CVE-2019-6674](https://insights.sbomify.com/CVE-2019-6674/): Denial of service in SSL Orchestrator (high 7.5)
- [CVE-2019-6673](https://insights.sbomify.com/CVE-2019-6673/): Denial of service in BIG-IP (high 7.5)
- [CVE-2019-6672](https://insights.sbomify.com/CVE-2019-6672/): Denial of service in BIG-IP AFM (high 7.5)
- [CVE-2019-6671](https://insights.sbomify.com/CVE-2019-6671/): Denial of service in BIG-IP (high 7.5)
- [CVE-2019-6670](https://insights.sbomify.com/CVE-2019-6670/): Information disclosure in BIG-IP (medium 4.4)
- [CVE-2019-6669](https://insights.sbomify.com/CVE-2019-6669/): Denial of service in BIG-IP (high 7.5)
- [CVE-2019-6668](https://insights.sbomify.com/CVE-2019-6668/): Privilege escalation in BIG-IP APM Edge Client (medium 5.5)
- [CVE-2019-6667](https://insights.sbomify.com/CVE-2019-6667/): Denial of service in BIG-IP (high 7.5)
- [CVE-2019-6666](https://insights.sbomify.com/CVE-2019-6666/): Denial of service in BIG-IP (high 7.5)
- [CVE-2019-6665](https://insights.sbomify.com/CVE-2019-6665/): Other in BIG-IP ASM (critical 9.4)
- [CVE-2019-6664](https://insights.sbomify.com/CVE-2019-6664/): Misconfiguration in BIG-IP (high 7.5)
- [CVE-2019-6663](https://insights.sbomify.com/CVE-2019-6663/): Server-side request forgery in BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager (medium 5.5)
- [CVE-2019-6662](https://insights.sbomify.com/CVE-2019-6662/): Information disclosure in BIG-IP (medium 6.5)
- [CVE-2019-6661](https://insights.sbomify.com/CVE-2019-6661/): Denial of service in BIG-IP APM (high 7.5)
- [CVE-2019-6660](https://insights.sbomify.com/CVE-2019-6660/): Denial of service in BIG-IP (high 7.5)
- [CVE-2019-6659](https://insights.sbomify.com/CVE-2019-6659/): Denial of service in BIG-IP (high 7.5)
- [CVE-2019-6658](https://insights.sbomify.com/CVE-2019-6658/): SQL injection in BIG-IP (AFM) (medium 4.3)
- [CVE-2019-6657](https://insights.sbomify.com/CVE-2019-6657/): Cross-site scripting in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (medium 6.1)
- [CVE-2019-6656](https://insights.sbomify.com/CVE-2019-6656/): Information disclosure in BIG-IP APM Edge Client (high 7.5)
- [CVE-2019-6655](https://insights.sbomify.com/CVE-2019-6655/): Information disclosure in BIG-IP AVR, ASM, APM, PEM, AFM, and/or AAM (medium 5.3)
- [CVE-2019-6654](https://insights.sbomify.com/CVE-2019-6654/): Security feature bypass in BIG-IP (medium 4.3)
- [CVE-2019-6653](https://insights.sbomify.com/CVE-2019-6653/): Cross-site scripting in BIG-IQ (medium 5.4)
- [CVE-2019-6652](https://insights.sbomify.com/CVE-2019-6652/): Missing authorization in BIG-IQ (medium 6.5)
- [CVE-2019-6651](https://insights.sbomify.com/CVE-2019-6651/): Information disclosure in BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager (medium 5.3)
- [CVE-2019-6650](https://insights.sbomify.com/CVE-2019-6650/): Information disclosure in BIG-IP ASM (critical 9.1)
- [CVE-2019-6649](https://insights.sbomify.com/CVE-2019-6649/): Information disclosure in BIG-IP, Enterprise Manager (critical 9.1)
- [CVE-2019-6648](https://insights.sbomify.com/CVE-2019-6648/): Information disclosure in F5 Container Ingress Service (medium 4.4)
- [CVE-2019-6647](https://insights.sbomify.com/CVE-2019-6647/): Denial of service in BIG-IP (medium 5.3)
- [CVE-2019-6646](https://insights.sbomify.com/CVE-2019-6646/): Privilege escalation in BIG-IP, Enterprise Manager (high 8.8)
- [CVE-2019-6645](https://insights.sbomify.com/CVE-2019-6645/): Denial of service in BIG-IP (high 7.5)
- [CVE-2019-6644](https://insights.sbomify.com/CVE-2019-6644/): Misconfiguration in BIG-IP (critical 9.4)
- [CVE-2019-6643](https://insights.sbomify.com/CVE-2019-6643/): Denial of service in BIG-IP (high 7.5)
- [CVE-2019-6642](https://insights.sbomify.com/CVE-2019-6642/): Privilege escalation in BIG-IP, BIG-IQ, iWorkflow, Enterprise Manager (high 8.8)
- [CVE-2019-6641](https://insights.sbomify.com/CVE-2019-6641/): Denial of service in BIG-IP (medium 6.5)
- [CVE-2019-6640](https://insights.sbomify.com/CVE-2019-6640/): Information disclosure in BIG-IP (medium 5.3)
- [CVE-2019-6639](https://insights.sbomify.com/CVE-2019-6639/): Cross-site scripting in BIG-IP (AFM, PEM) (medium 4.8)
- [CVE-2019-6638](https://insights.sbomify.com/CVE-2019-6638/): Denial of service in BIG-IP (medium 6.5)
- [CVE-2019-6637](https://insights.sbomify.com/CVE-2019-6637/): Denial of service in BIG-IP (ASM) (medium 6.5)
- [CVE-2019-6636](https://insights.sbomify.com/CVE-2019-6636/): Cross-site scripting in BIG-IP (AFM, ASM) (high 8.4)
- [CVE-2019-6635](https://insights.sbomify.com/CVE-2019-6635/): Security feature bypass in BIG-IP (medium 4.4)
- [CVE-2019-6634](https://insights.sbomify.com/CVE-2019-6634/): Denial of service in BIG-IP (medium 6.5)
- [CVE-2019-6633](https://insights.sbomify.com/CVE-2019-6633/): Security feature bypass in BIG-IP (medium 4.4)
- [CVE-2019-6632](https://insights.sbomify.com/CVE-2019-6632/): Weak cryptography in BIG-IP (medium 5.5)
- [CVE-2019-6631](https://insights.sbomify.com/CVE-2019-6631/): Denial of service in BIG-IP (high 7.5)
- [CVE-2019-6630](https://insights.sbomify.com/CVE-2019-6630/): Denial of service in F5 SSL Orchestrator (high 7.5)
- [CVE-2019-6629](https://insights.sbomify.com/CVE-2019-6629/): Denial of service in BIG-IP (high 7.5)
- [CVE-2019-6628](https://insights.sbomify.com/CVE-2019-6628/): Denial of service in BIG-IP PEM (high 7.5)
- [CVE-2019-6627](https://insights.sbomify.com/CVE-2019-6627/): Race condition in F5 SSL Orchestrator (medium 5.9)
- [CVE-2019-6626](https://insights.sbomify.com/CVE-2019-6626/): Cross-site scripting in BIG-IP (AFM, Analytics, ASM) (medium 6.1)
- [CVE-2019-6625](https://insights.sbomify.com/CVE-2019-6625/): Cross-site scripting in BIG-IP (medium 6.1)
- [CVE-2019-6624](https://insights.sbomify.com/CVE-2019-6624/): Denial of service in BIG-IP (high 7.5)
- [CVE-2019-6623](https://insights.sbomify.com/CVE-2019-6623/): Denial of service in BIG-IP (high 7.5)
- [CVE-2019-6622](https://insights.sbomify.com/CVE-2019-6622/): Command injection in BIG-IP (high 7.2)
- [CVE-2019-6621](https://insights.sbomify.com/CVE-2019-6621/): Command injection in BIG-IP (high 7.2)
- [CVE-2019-6620](https://insights.sbomify.com/CVE-2019-6620/): Command injection in BIG-IP, BIG-IQ (high 7.2)
- [CVE-2019-6619](https://insights.sbomify.com/CVE-2019-6619/): Denial of service in BIG-IP (LTM, AAM, AFM, APM, ASM, Link Controller, PEM, WebAccelerator) (high 7.5)
- [CVE-2019-6618](https://insights.sbomify.com/CVE-2019-6618/): Privilege escalation in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (medium 4.9)
- [CVE-2019-6617](https://insights.sbomify.com/CVE-2019-6617/): Privilege escalation in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (medium 6.5)
- [CVE-2019-6616](https://insights.sbomify.com/CVE-2019-6616/): Security feature bypass in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (high 7.2)
- [CVE-2019-6615](https://insights.sbomify.com/CVE-2019-6615/): Security feature bypass in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (medium 4.9)
- [CVE-2019-6614](https://insights.sbomify.com/CVE-2019-6614/): Path traversal in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (medium 6.5)
- [CVE-2019-6613](https://insights.sbomify.com/CVE-2019-6613/): Information disclosure in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (medium 5.3)
- [CVE-2019-6612](https://insights.sbomify.com/CVE-2019-6612/): Denial of service in BIG-IP (LTM, AAM, AFM, APM, ASM, DNS, GTM, Link Controller, PEM) (high 7.5)
- [CVE-2019-6611](https://insights.sbomify.com/CVE-2019-6611/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (high 7.5)
- [CVE-2019-6610](https://insights.sbomify.com/CVE-2019-6610/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (high 8.6)
- [CVE-2019-6609](https://insights.sbomify.com/CVE-2019-6609/): Information disclosure in BIG-IP APM (critical 9.8)
- [CVE-2019-6608](https://insights.sbomify.com/CVE-2019-6608/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (medium 5.9)
- [CVE-2019-6607](https://insights.sbomify.com/CVE-2019-6607/): Cross-site scripting in BIG-IP (ASM) (medium 6.8)
- [CVE-2019-6606](https://insights.sbomify.com/CVE-2019-6606/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (medium 4.3)
- [CVE-2019-6605](https://insights.sbomify.com/CVE-2019-6605/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (high 7.5)
- [CVE-2019-6604](https://insights.sbomify.com/CVE-2019-6604/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (medium 6.8)
- [CVE-2019-6603](https://insights.sbomify.com/CVE-2019-6603/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (high 7.5)
- [CVE-2019-6602](https://insights.sbomify.com/CVE-2019-6602/): Information disclosure in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (high 7.5)
- [CVE-2019-6601](https://insights.sbomify.com/CVE-2019-6601/): Privilege escalation in BIG-IP (AAM) (medium 5.5)
- [CVE-2019-6600](https://insights.sbomify.com/CVE-2019-6600/): Cross-site scripting in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (medium 6.1)
- [CVE-2019-6599](https://insights.sbomify.com/CVE-2019-6599/): Cross-site scripting in BIG-IP APM; Enterprise Manager (medium 6.1)
- [CVE-2019-6598](https://insights.sbomify.com/CVE-2019-6598/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe); Enterprise Manager (medium 4.3)
- [CVE-2019-6597](https://insights.sbomify.com/CVE-2019-6597/): Command injection in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator); Enterprise Manager (high 7.2)
- [CVE-2019-6596](https://insights.sbomify.com/CVE-2019-6596/): Memory corruption in BIG-IP (APM) (high 7.5)
- [CVE-2019-6595](https://insights.sbomify.com/CVE-2019-6595/): Cross-site scripting in BIG-IP (APM) (medium 6.1)
- [CVE-2019-6594](https://insights.sbomify.com/CVE-2019-6594/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (medium 5.9)
- [CVE-2019-6593](https://insights.sbomify.com/CVE-2019-6593/): Weak cryptography in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (medium 5.9)
- [CVE-2019-6592](https://insights.sbomify.com/CVE-2019-6592/): Denial of service in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (critical 9.1)
- [CVE-2019-6591](https://insights.sbomify.com/CVE-2019-6591/): Cross-site scripting in BIG-IP (APM) (medium 5.4)
- [CVE-2019-6590](https://insights.sbomify.com/CVE-2019-6590/): Denial of service in BIG-IP (LTM) (medium 5.9)
- [CVE-2019-6589](https://insights.sbomify.com/CVE-2019-6589/): Cross-site scripting in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) (medium 6.1)
- [CVE-2019-6588](https://insights.sbomify.com/CVE-2019-6588/): Liferay Portal Allows Cross-Site Scripting (XSS) via the SimpleCaptcha API (medium 4.7)
- [CVE-2019-6585](https://insights.sbomify.com/CVE-2019-6585/): Cross-site scripting in SCALANCE S602 (medium 6.1)
- [CVE-2019-6584](https://insights.sbomify.com/CVE-2019-6584/): Security feature bypass in SIEMENS LOGO!8 (high 8.8)
- [CVE-2019-6582](https://insights.sbomify.com/CVE-2019-6582/): Missing authorization in Siveillance VMS 2017 R2 (high 7.1)
- [CVE-2019-6581](https://insights.sbomify.com/CVE-2019-6581/): Missing authorization in Siveillance VMS 2017 R2 (high 8.8)
- [CVE-2019-6580](https://insights.sbomify.com/CVE-2019-6580/): Missing authorization in Siveillance VMS 2017 R2 (critical 9.8)
- [CVE-2019-6579](https://insights.sbomify.com/CVE-2019-6579/): Command injection in Spectrum Power™ 4 (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2019/page/29/