kbrain

CVE-2014-8730

MEDIUM · CVSS 4.3EPSS 13.8%EU EUVD

The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, AAM 11.4.0 through 11.5.1, AFM 11.3.0 through 11.5.1, Analytics 11.0.0 through 11.5.1, Edge Gateway, WebAccelerator, and WOM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, PEM 11.3.0 through 11.6.0, and PSM 10.0.0 through 10.2.4 and 11.0.0 through 11.4.1 and BIG-IQ Cloud and Security 4.0.0 through 4.4.0 and Device 4.2.0 through 4.4.0, when using TLS 1.x before TLS 1.2, does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE). NOTE: the scope of this identifier is limited to the F5 implementation only. Other vulnerable implementations should receive their own CVE ID, since this is not a vulnerability within the design of TLS 1.x itself.

Key facts

CVSS score
4.3 (v2.0)
Severity
MEDIUM
CVSS vector
AV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness (CWE)
CWE-310
EPSS score
13.8% (97th percentile)
In CISA KEV
No
In EU EUVD
Yes (EUVD-2014-8562)
Published
December 10, 2014
NVD last modified
June 17, 2026
Status
Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2014-8562 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.

View on the EU Vulnerability Database

Affected products

  • f5 / big-ip access policy manager
  • f5 / big-ip access policy manager
  • f5 / big-ip access policy manager
  • f5 / big-ip access policy manager
  • f5 / big-ip access policy manager
  • f5 / big-ip access policy manager
  • f5 / big-ip access policy manager
  • f5 / big-ip access policy manager
  • f5 / big-ip access policy manager
  • f5 / big-ip access policy manager
  • f5 / big-ip access policy manager
  • f5 / big-ip access policy manager
  • f5 / big-ip access policy manager
  • f5 / big-ip access policy manager
  • f5 / big-ip advanced firewall manager
  • f5 / big-ip advanced firewall manager
  • f5 / big-ip advanced firewall manager
  • f5 / big-ip advanced firewall manager
  • f5 / big-ip advanced firewall manager
  • f5 / big-ip analytics
  • f5 / big-ip analytics
  • f5 / big-ip analytics
  • f5 / big-ip analytics
  • f5 / big-ip analytics
  • f5 / big-ip analytics
  • f5 / big-ip analytics
  • f5 / big-ip analytics
  • f5 / big-ip analytics
  • f5 / big-ip application acceleration manager
  • f5 / big-ip application acceleration manager
  • f5 / big-ip application acceleration manager
  • f5 / big-ip application acceleration manager
  • f5 / big-ip application acceleration manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip application security manager
  • f5 / big-ip edge gateway

and 86 more…

References

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain