CVE-2014-8730

The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1, AAM 11.4.0 through 11.5.1, AFM 11.3.0 through 11.5.1, Analytics 11.0.0 through 11.5.1, Edge Gateway, WebAccelerator, and WOM 10.1.0 through 10.2.4 and 11.0.0 through 11.3.0, PEM 11.3.0 through 11.6.0, and PSM 10.0.0 through 10.2.4 and 11.0.0 through 11.4.1 and BIG-IQ Cloud and Security 4.0.0 through 4.4.0 and Device 4.2.0 through 4.4.0, when using TLS 1.x before TLS 1.2, does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE). NOTE: the scope of this identifier is limited to the F5 implementation only. Other vulnerable implementations should receive their own CVE ID, since this is not a vulnerability within the design of TLS 1.x itself.

Published: 2014-12-10 Last update: 2026-05-06 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2014-8730 is rated Moderate Risk (55.8/100): CVSS Medium severity, with high exploitation likelihood (EPSS 13.72%, 96th percentile). EPSS ranks this CVE among the most likely to be exploited in the near term. EPSS rose +10.62% over the last day, indicating growing attacker interest. High exploitation likelihood—assess exposure and prioritize remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2014-8730

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 3.10% 13.72% +10.62%
2 2025-12-21 3.16% 3.10% -0.06%
3 2025-10-21 — 3.16% —

Full EPSS history (17 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2014-8730

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
4.3 2.0 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:N)
No integrity impact.
Availability impact (A:N)
No availability impact.
 8.6 2.9 [email protected]

Weakness enumeration for CVE-2014-8730

OS Trackers for CVE-2014-8730

vendor priority summary link
redhat medium — https://access.redhat.com/security/cve/CVE-2014-8730

Affected software / configurations for CVE-2014-8730

Vendor Product Version Raw CPE
f5 big-ip_local_traffic_manager 10.0.0 cpe:2.3:a:f5:big-ip_local_traffic_manager:10.0.0:*:*:*:*:*:*:*
f5 big-ip_local_traffic_manager 10.0.1 cpe:2.3:a:f5:big-ip_local_traffic_manager:10.0.1:*:*:*:*:*:*:*
f5 big-ip_local_traffic_manager 10.1.0 cpe:2.3:a:f5:big-ip_local_traffic_manager:10.1.0:*:*:*:*:*:*:*
f5 big-ip_local_traffic_manager 10.2.0 cpe:2.3:a:f5:big-ip_local_traffic_manager:10.2.0:*:*:*:*:*:*:*
f5 big-ip_local_traffic_manager 10.2.1 cpe:2.3:a:f5:big-ip_local_traffic_manager:10.2.1:*:*:*:*:*:*:*
f5 big-ip_local_traffic_manager 10.2.2 cpe:2.3:a:f5:big-ip_local_traffic_manager:10.2.2:*:*:*:*:*:*:*
f5 big-ip_local_traffic_manager 10.2.3 cpe:2.3:a:f5:big-ip_local_traffic_manager:10.2.3:*:*:*:*:*:*:*
f5 big-ip_local_traffic_manager 10.2.4 cpe:2.3:a:f5:big-ip_local_traffic_manager:10.2.4:*:*:*:*:*:*:*
f5 big-ip_local_traffic_manager 11.0.0 cpe:2.3:a:f5:big-ip_local_traffic_manager:11.0.0:*:*:*:*:*:*:*
f5 big-ip_local_traffic_manager 11.1.0 cpe:2.3:a:f5:big-ip_local_traffic_manager:11.1.0:*:*:*:*:*:*:*
f5 big-ip_local_traffic_manager 11.2.0 cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.0:*:*:*:*:*:*:*
f5 big-ip_local_traffic_manager 11.2.1 cpe:2.3:a:f5:big-ip_local_traffic_manager:11.2.1:*:*:*:*:*:*:*
f5 big-ip_local_traffic_manager 11.3.0 cpe:2.3:a:f5:big-ip_local_traffic_manager:11.3.0:*:*:*:*:*:*:*
f5 big-ip_local_traffic_manager 11.4.0 cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.0:*:*:*:*:*:*:*
f5 big-ip_local_traffic_manager 11.4.1 cpe:2.3:a:f5:big-ip_local_traffic_manager:11.4.1:*:*:*:*:*:*:*
f5 big-ip_local_traffic_manager 11.5.1 cpe:2.3:a:f5:big-ip_local_traffic_manager:11.5.1:*:*:*:*:*:*:*
f5 big-ip_access_policy_manager 10.1.0 cpe:2.3:a:f5:big-ip_access_policy_manager:10.1.0:*:*:*:*:*:*:*
f5 big-ip_access_policy_manager 10.2.0 cpe:2.3:a:f5:big-ip_access_policy_manager:10.2.0:*:*:*:*:*:*:*
f5 big-ip_access_policy_manager 10.2.1 cpe:2.3:a:f5:big-ip_access_policy_manager:10.2.1:*:*:*:*:*:*:*
f5 big-ip_access_policy_manager 10.2.2 cpe:2.3:a:f5:big-ip_access_policy_manager:10.2.2:*:*:*:*:*:*:*
f5 big-ip_access_policy_manager 10.2.3 cpe:2.3:a:f5:big-ip_access_policy_manager:10.2.3:*:*:*:*:*:*:*
f5 big-ip_access_policy_manager 10.2.4 cpe:2.3:a:f5:big-ip_access_policy_manager:10.2.4:*:*:*:*:*:*:*
f5 big-ip_access_policy_manager 11.0.0 cpe:2.3:a:f5:big-ip_access_policy_manager:11.0.0:*:*:*:*:*:*:*
f5 big-ip_access_policy_manager 11.1.0 cpe:2.3:a:f5:big-ip_access_policy_manager:11.1.0:*:*:*:*:*:*:*
f5 big-ip_access_policy_manager 11.2.0 cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.0:*:*:*:*:*:*:*
f5 big-ip_access_policy_manager 11.2.1 cpe:2.3:a:f5:big-ip_access_policy_manager:11.2.1:*:*:*:*:*:*:*
f5 big-ip_access_policy_manager 11.3.0 cpe:2.3:a:f5:big-ip_access_policy_manager:11.3.0:*:*:*:*:*:*:*
f5 big-ip_access_policy_manager 11.4.0 cpe:2.3:a:f5:big-ip_access_policy_manager:11.4.0:*:*:*:*:*:*:*
f5 big-ip_access_policy_manager 11.5.0 cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.0:*:*:*:*:*:*:*
f5 big-ip_access_policy_manager 11.5.1 cpe:2.3:a:f5:big-ip_access_policy_manager:11.5.1:*:*:*:*:*:*:*
f5 big-ip_policy_enforcement_manager 11.3.0 cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.3.0:*:*:*:*:*:*:*
f5 big-ip_policy_enforcement_manager 11.4.0 cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.0:*:*:*:*:*:*:*
f5 big-ip_policy_enforcement_manager 11.4.1 cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.4.1:*:*:*:*:*:*:*
f5 big-ip_policy_enforcement_manager 11.5.0 cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.0:*:*:*:*:*:*:*
f5 big-ip_policy_enforcement_manager 11.5.1 cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.5.1:*:*:*:*:*:*:*
f5 big-ip_policy_enforcement_manager 11.6.0 cpe:2.3:a:f5:big-ip_policy_enforcement_manager:11.6.0:*:*:*:*:*:*:*
f5 big-ip_protocol_security_module 10.0.0 cpe:2.3:a:f5:big-ip_protocol_security_module:10.0.0:*:*:*:*:*:*:*
f5 big-ip_protocol_security_module 10.0.1 cpe:2.3:a:f5:big-ip_protocol_security_module:10.0.1:*:*:*:*:*:*:*
f5 big-ip_protocol_security_module 10.1.0 cpe:2.3:a:f5:big-ip_protocol_security_module:10.1.0:*:*:*:*:*:*:*
f5 big-ip_protocol_security_module 10.2.0 cpe:2.3:a:f5:big-ip_protocol_security_module:10.2.0:*:*:*:*:*:*:*
f5 big-ip_protocol_security_module 10.2.1 cpe:2.3:a:f5:big-ip_protocol_security_module:10.2.1:*:*:*:*:*:*:*
f5 big-ip_protocol_security_module 10.2.2 cpe:2.3:a:f5:big-ip_protocol_security_module:10.2.2:*:*:*:*:*:*:*
f5 big-ip_protocol_security_module 10.2.3 cpe:2.3:a:f5:big-ip_protocol_security_module:10.2.3:*:*:*:*:*:*:*
f5 big-ip_protocol_security_module 10.2.4 cpe:2.3:a:f5:big-ip_protocol_security_module:10.2.4:*:*:*:*:*:*:*
f5 big-ip_protocol_security_module 11.0.0 cpe:2.3:a:f5:big-ip_protocol_security_module:11.0.0:*:*:*:*:*:*:*
f5 big-ip_protocol_security_module 11.1.0 cpe:2.3:a:f5:big-ip_protocol_security_module:11.1.0:*:*:*:*:*:*:*
f5 big-ip_protocol_security_module 11.2.0 cpe:2.3:a:f5:big-ip_protocol_security_module:11.2.0:*:*:*:*:*:*:*
f5 big-ip_protocol_security_module 11.2.1 cpe:2.3:a:f5:big-ip_protocol_security_module:11.2.1:*:*:*:*:*:*:*
f5 big-ip_protocol_security_module 11.3.0 cpe:2.3:a:f5:big-ip_protocol_security_module:11.3.0:*:*:*:*:*:*:*
f5 big-ip_protocol_security_module 11.4.0 cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.0:*:*:*:*:*:*:*
f5 big-ip_protocol_security_module 11.4.1 cpe:2.3:a:f5:big-ip_protocol_security_module:11.4.1:*:*:*:*:*:*:*
f5 big-ip_application_acceleration_manager 11.4.0 cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.0:*:*:*:*:*:*:*
f5 big-ip_application_acceleration_manager 11.4.1 cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.4.1:*:*:*:*:*:*:*
f5 big-ip_application_acceleration_manager 11.5.0 cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.0:*:*:*:*:*:*:*
f5 big-ip_application_acceleration_manager 11.5.1 cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.5.1:*:*:*:*:*:*:*
f5 big-ip_application_acceleration_manager 11.6.0 cpe:2.3:a:f5:big-ip_application_acceleration_manager:11.6.0:*:*:*:*:*:*:*
f5 big-ip_webaccelerator 10.0.0 cpe:2.3:a:f5:big-ip_webaccelerator:10.0.0:*:*:*:*:*:*:*
f5 big-ip_webaccelerator 10.0.1 cpe:2.3:a:f5:big-ip_webaccelerator:10.0.1:*:*:*:*:*:*:*
f5 big-ip_webaccelerator 10.1.0 cpe:2.3:a:f5:big-ip_webaccelerator:10.1.0:*:*:*:*:*:*:*
f5 big-ip_webaccelerator 10.2.0 cpe:2.3:a:f5:big-ip_webaccelerator:10.2.0:*:*:*:*:*:*:*
f5 big-ip_webaccelerator 10.2.1 cpe:2.3:a:f5:big-ip_webaccelerator:10.2.1:*:*:*:*:*:*:*
f5 big-ip_webaccelerator 10.2.2 cpe:2.3:a:f5:big-ip_webaccelerator:10.2.2:*:*:*:*:*:*:*
f5 big-ip_webaccelerator 10.2.3 cpe:2.3:a:f5:big-ip_webaccelerator:10.2.3:*:*:*:*:*:*:*
f5 big-ip_webaccelerator 10.2.4 cpe:2.3:a:f5:big-ip_webaccelerator:10.2.4:*:*:*:*:*:*:*
f5 big-ip_webaccelerator 11.0.0 cpe:2.3:a:f5:big-ip_webaccelerator:11.0.0:*:*:*:*:*:*:*
f5 big-ip_webaccelerator 11.1.0 cpe:2.3:a:f5:big-ip_webaccelerator:11.1.0:*:*:*:*:*:*:*
f5 big-ip_webaccelerator 11.2.0 cpe:2.3:a:f5:big-ip_webaccelerator:11.2.0:*:*:*:*:*:*:*
f5 big-ip_webaccelerator 11.2.1 cpe:2.3:a:f5:big-ip_webaccelerator:11.2.1:*:*:*:*:*:*:*
f5 big-ip_webaccelerator 11.3.0 cpe:2.3:a:f5:big-ip_webaccelerator:11.3.0:*:*:*:*:*:*:*
f5 big-iq_security 4.0.0 cpe:2.3:a:f5:big-iq_security:4.0.0:*:*:*:*:*:*:*
f5 big-iq_security 4.1.0 cpe:2.3:a:f5:big-iq_security:4.1.0:*:*:*:*:*:*:*
f5 big-iq_security 4.2.0 cpe:2.3:a:f5:big-iq_security:4.2.0:*:*:*:*:*:*:*
f5 big-iq_security 4.3.0 cpe:2.3:a:f5:big-iq_security:4.3.0:*:*:*:*:*:*:*
f5 big-iq_security 4.4.0 cpe:2.3:a:f5:big-iq_security:4.4.0:*:*:*:*:*:*:*
f5 big-ip_edge_gateway 10.1.0 cpe:2.3:a:f5:big-ip_edge_gateway:10.1.0:*:*:*:*:*:*:*
f5 big-ip_edge_gateway 10.2.0 cpe:2.3:a:f5:big-ip_edge_gateway:10.2.0:*:*:*:*:*:*:*
f5 big-ip_edge_gateway 10.2.1 cpe:2.3:a:f5:big-ip_edge_gateway:10.2.1:*:*:*:*:*:*:*
f5 big-ip_edge_gateway 10.2.2 cpe:2.3:a:f5:big-ip_edge_gateway:10.2.2:*:*:*:*:*:*:*
f5 big-ip_edge_gateway 10.2.3 cpe:2.3:a:f5:big-ip_edge_gateway:10.2.3:*:*:*:*:*:*:*
f5 big-ip_edge_gateway 10.2.4 cpe:2.3:a:f5:big-ip_edge_gateway:10.2.4:*:*:*:*:*:*:*

References for CVE-2014-8730

URL Tags
http://marc.info/?l=bugtraq&m=144372772101168&w=2
http://secunia.com/advisories/62167
http://secunia.com/advisories/62224
http://secunia.com/advisories/62388
http://www-01.ibm.com/support/docview.wss?uid=swg21693271
http://www-01.ibm.com/support/docview.wss?uid=swg21693337
http://www-01.ibm.com/support/docview.wss?uid=swg21693495
http://www.openwall.com/lists/oss-security/2014/12/09/27
https://devcentral.f5.com/articles/cve-2014-8730-padding-issue-8151 Vendor Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04819635
https://support.f5.com/kb/en-us/solutions/public/15000/800/sol15882.html Vendor Advisory
https://support.lenovo.com/product_security/poodle
https://support.lenovo.com/us/en/product_security/poodle
https://www.imperialviolet.org/2014/12/08/poodleagain.html
cvelogic Threat Intelligence