AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2015-4637

MEDIUM · CVSS 4.3 EPSS 1.14%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-07-16 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.3. It affects F5. It may be remotely exploitable.

CVE
CVE-2015-4637
Severity
MEDIUM
CVSS
4.3
EPSS
1.14%
F5

Original NVD Description

The REST API in F5 BIG-IQ Cloud, Device, and Security 4.4.0 and 4.5.0 before HF2 and ADC 4.5.0 before HF2, when configured for LDAP remote authentication and the LDAP server allows anonymous BIND operations, allows remote attackers to obtain an authentication token for arbitrary users by guessing an LDAP user account name.