{"advisories":[{"id":"EUVD-2016-6642","source":"euvd","title":"Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2, when configured with the HTTP Explicit Proxy functionality or SOCKS profile, allow remote attackers to modify the system configuration, read system files, and possibly execute arbitrary code via unspecified vectors.","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-6642"}],"cve":"CVE-2016-5700","epss":{"score":0.06422},"mitre":{"cpes":[],"created":"2016-10-03T16:00:00+00:00","description":"Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2, when configured with the HTTP Explicit Proxy functionality or SOCKS profile, allow remote attackers to modify the system configuration, read system files, and possibly execute arbitrary code via unspecified vectors.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2016/5xxx/CVE-2016-5700.json","references":["http://www.securityfocus.com/bid/93325","http://www.securitytracker.com/id/1036928","https://support.f5.com/kb/en-us/solutions/public/k/35/sol35520031.html"],"title":null,"updated":"2024-08-06T01:07:59.920000+00:00","vendors":[],"weaknesses":[]},"nvd":{"cpes":["cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.4:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:11.5.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:12.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:11.5.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:11.5.2:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:11.5.3:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:11.5.4:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:11.6.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:12.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.4:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.4:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_websafe:11.6.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_websafe:11.6.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_websafe:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_websafe:12.1.0:*:*:*:*:*:*:*"],"created":"2016-10-03T16:09:13.790000+00:00","description":"Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2, when configured with the HTTP Explicit Proxy functionality or SOCKS profile, allow remote attackers to modify the system configuration, read system files, and possibly execute arbitrary code via unspecified vectors.","metrics":{"cvssV2_0":{"score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C"},"cvssV3_0":{"score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cvssV3_1":{},"cvssV4_0":{}},"nvd_repo_path":"2016/CVE-2016-5700.json","references":["http://www.securityfocus.com/bid/93325","http://www.securitytracker.com/id/1036928","https://support.f5.com/kb/en-us/solutions/public/k/35/sol35520031.html"],"title":null,"updated":"2026-06-17T00:49:53.723000+00:00","vendors":["f5","f5$PRODUCT$big-ip_access_policy_manager","f5$PRODUCT$big-ip_advanced_firewall_manager","f5$PRODUCT$big-ip_application_acceleration_manager","f5$PRODUCT$big-ip_application_security_manager","f5$PRODUCT$big-ip_link_controller","f5$PRODUCT$big-ip_local_traffic_manager","f5$PRODUCT$big-ip_policy_enforcement_manager","f5$PRODUCT$big-ip_websafe"],"weaknesses":["CWE-284"]},"opencve":{"changes":[],"cpes":{"data":["cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.2:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.3:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.4:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_access_policy_manager:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.2:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.3:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.5.4:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:11.6.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.2:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.3:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.4:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:11.5.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:11.5.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:11.5.2:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:11.5.3:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:11.5.4:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:11.6.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:11.6.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_application_security_manager:12.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:11.5.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:11.5.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:11.5.2:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:11.5.3:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:11.5.4:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:11.6.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:11.6.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_link_controller:12.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.2:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.3:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.4:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:11.6.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.2:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.3:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.4:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_websafe:11.6.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_websafe:11.6.1:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_websafe:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:f5:big-ip_websafe:12.1.0:*:*:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2016-10-03T16:00:00+00:00","provider":"mitre"},"description":{"data":"Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2, when configured with the HTTP Explicit Proxy functionality or SOCKS profile, allow remote attackers to modify the system configuration, read system files, and possibly execute arbitrary code via unspecified vectors.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{"score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C"},"provider":"nvd"},"cvssV3_0":{"data":{"score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"provider":"nvd"},"cvssV3_1":{"data":{},"provider":null},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.06422},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{},"provider":null},"threat_severity":{"data":null,"provider":null}},"references":{"data":["http://www.securityfocus.com/bid/93325","http://www.securitytracker.com/id/1036928","https://support.f5.com/kb/en-us/solutions/public/k/35/sol35520031.html"],"providers":["mitre","nvd"]},"title":{"data":null,"provider":null},"updated":{"data":"2025-04-12T10:46:40.837000+00:00","provider":"nvd"},"vendors":{"data":["f5","f5$PRODUCT$big-ip_access_policy_manager","f5$PRODUCT$big-ip_advanced_firewall_manager","f5$PRODUCT$big-ip_application_acceleration_manager","f5$PRODUCT$big-ip_application_security_manager","f5$PRODUCT$big-ip_link_controller","f5$PRODUCT$big-ip_local_traffic_manager","f5$PRODUCT$big-ip_policy_enforcement_manager","f5$PRODUCT$big-ip_websafe"],"providers":["nvd"]},"weaknesses":{"data":["CWE-284"],"providers":["nvd"]}}}