BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the TCP profile for a virtual server is configured with Congestion Metrics Cache enabled, allow remote. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Denial Of Service
Big Ip Analytics
Big Ip Application Acceleration Manager
Big Ip Link Controller
Big Ip Advanced Firewall Manager
+4
NVD
CVSS 3.0
3.7
EPSS
0.8%
OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instances and use_cow_images is set to false, allow remote authenticated users to read. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. No vendor patch available.
Information Disclosure
Nova
NVD
CVSS 3.0
3.5
EPSS
0.2%