Vulnerability record · CVE-2007-0195 · published 12 January 2007

CVE-2007-0195: F5 firepass vulnerability

F5 · Firepass

my.activation.php3 in F5 FirePass 5.4 through 5.5.1 and 6.0 displays different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to confirm the validity of an LDAP account.

5.0 CVSS 2.0 Medium EPSS 1.5% · top 26.9%

5.0CVSS 2.0 base score

1.5%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

12References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Firepass F5

References

Link	Tags
http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051651.html
http://secunia.com/advisories/23627
http://www.mnin.org/advisories/2007_firepass.pdf
http://www.osvdb.org/32736
http://www.securityfocus.com/bid/21957
https://tech.f5.com/home/solutions/sol6923.html
http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051651.html
http://secunia.com/advisories/23627
http://www.mnin.org/advisories/2007_firepass.pdf
http://www.osvdb.org/32736
http://www.securityfocus.com/bid/21957
https://tech.f5.com/home/solutions/sol6923.html

Track CVE-2007-0195 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2014-2927F5 arx improper authentication vulnerabilityThe rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before HF7, 11.3.0 before HF9, and …EPSS 7.9%15 Oct 2014 9.3CVE-2013-0150F5 big-ip access policy manager path traversal vulnerabilityDirectory traversal vulnerability in an unspecified signed Java applet in the client-side components in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.0.…EPSS 6.3%9 Aug 2013 9.1CVE-2011-3188Linux kernel vulnerabilityThe (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Ident…EPSS 5.0%24 May 2012 7.5CVE-2012-1777F5 firepass sql injection vulnerabilitySQL injection vulnerability in my.activation.php3 in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0 allows remote attackers to execute arbitrary SQL comma…EPSS 2.3%5 Apr 2012 7.5CVE-2007-0187F5 firepass vulnerabilityF5 FirePass 5.4 through 5.5.2 and 6.0 allows remote attackers to access restricted URLs via (1) a trailing null byte, (2) multiple leading slashes, (…EPSS 3.7%12 Jan 2007 7.2CVE-2012-2053F5 firepass permissions and access controls vulnerabilityThe sudoers file in the Linux system configuration in F5 FirePass 6.0.0 through 6.1.0 and 7.0.0 does not require a password for executing commands as…EPSS 0.48%5 Apr 2012 6.5CVE-2007-0188F5 firepass vulnerabilityF5 FirePass 5.4 through 5.5.1 does not properly enforce host access restrictions when a client uses a single integer (dword) representation of an IP …EPSS 1.4%12 Jan 2007 5.9CVE-2013-3587F5 big-ip access policy manager information exposure vulnerabilityThe HTTPS protocol, as used in unspecified web applications, can encrypt compressed data without properly obfuscating the length of the unencrypted d…EPSS 6.0%21 Feb 2020

Source: NIST National Vulnerability Database (record CVE-2007-0195), CISA KEV, FIRST EPSS (scores of 2026-09-30). This page is refreshed as NVD updates the record.