AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-15331

HIGH · CVSS 7.8 EPSS 0.88%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-12-20 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.8. It affects BIG-IP.

CVE
CVE-2018-15331
Severity
HIGH
CVSS
7.8
EPSS
0.88%
BIG-IP

Original NVD Description

On BIG-IP AAM 13.0.0 or 12.1.0-12.1.3.7, the dcdb_convert utility used by BIG-IP AAM fails to drop group permissions when executing helper scripts, which could be used to leverage attacks against the BIG-IP system.

Related CVEs

Other vulnerabilities affecting the same vendor(s)