F5 Networks BIG-IP : cURL vulnerability (K15402727)

high Nessus Plugin ID 154679

Version 1.11

Oct 22, 2026, 12:02 AM

  • Detection (corrected module name from AM to AAM; version now includes hotfix level in scan results. corrected version threshold, removing a false positive on a specific hotfix. corrected version ranges across several modules for more accurate detection)
  • Logic Changes (restored a KB flag used by other scan checks. updated to current plugin format. restricts detection to systems with the Configuration utility component installed. restricts detection to affected hardware models. restricts detection to systems with affected components installed)

Plugin Feed: 202610220002

Version 1.10

May 8, 2026, 8:04 PM

  • IAVM reference

Plugin Feed: 202605082004

Version 1.9

Mar 27, 2025, 11:10 AM

  • CVSS metrics ("Cvssv4 score" set to 0.0)
  • CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C")
  • CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C")
  • CVSSv2 severity (based on None, severity decreased from "High" to "Low")
  • Plugin metadata

Plugin Feed: 202503271110

Version 1.8

Jan 3, 2024, 4:18 AM

  • Plugin metadata

Plugin Feed: 202401030418

Version 1.7

Nov 2, 2023, 10:41 AM

  • Detection (updated detection logic)
  • Plugin metadata

Plugin Feed: 202311021041

Version 1.6

Aug 31, 2023, 8:12 AM

  • Detection

Plugin Feed: 202308310812

Version 1.6

Nov 2, 2023, 8:48 AM

  • Detection (updated detection logic)
  • Plugin metadata

Plugin Feed: 202311020848

Version 1.5

Aug 18, 2023, 4:12 PM

  • CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:F/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C")
  • Detection
  • Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available")
  • Plugin metadata

Plugin Feed: 202308181612

Version 1.4

Dec 6, 2022, 2:54 AM

  • Reference

Plugin Feed: 202212060254

* Changelogs are generally available for changes made after Nov 1, 2022