CVE-2016-1497

Severity: medium (CVSS 4.9 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-08-26 · updated 2026-06-17
Weakness: CWE-200

Description

The Configuration utility in F5 BIG-IP systems 11.0.x, 11.1.x, 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4 HF2, 1.6.x before 11.6.1, and 12.0.0 before HF1 allows remote administrators to read Access Policy Manager (APM) access logs via unspecified vectors.

Affected products

F5 BIG-IP APM: 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0 (+8)
BIG-IP: 11.2.1, 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1 (+5)
F5 Big-Ip Analytics: 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0 (+8)
F5 Networks, Inc. BIG-IP (AAM): 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2, 11.5.3 (+3)
BIG-IP ASM: 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0 (+8)
F5 BIG-IP DNS: 12.0.0
F5 Big-Ip Edge Gateway: 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0
F5 Big-Ip Global Traffic Manager: 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0 (+7)
F5 Big-Ip Link Controller: 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0 (+8)
F5 BIG-IP (LTM): 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0 (+8)
F5 Networks, Inc. BIG-IP (PEM): 11.3.0, 11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2 (+4)
F5 Big-Ip Protocol Security Module: 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0 (+1)
F5 Big-Ip Wan Optimization Manager: 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0
F5 Big-Ip Webaccelerator: 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0

References

Get alerted when CVE-2016-1497 or the next vulnerability affects your stack