F5

Big-ip Local Traffic Manager

461 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2022-28701

  • EPSS 0.65%
  • Published 05.05.2022 17:15:14
  • Last modified 21.11.2024 06:57:45

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, when the stream profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support ...

7.5

CVE-2022-28705

  • EPSS 0.9%
  • Published 05.05.2022 17:15:14
  • Last modified 21.11.2024 06:57:46

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, on platforms with an ePVA and the pva.fwdaccel BigDB variable enabled, undisclosed requests to ...

7.5

CVE-2022-28706

  • EPSS 0.67%
  • Published 05.05.2022 17:15:14
  • Last modified 21.11.2024 06:57:46

On F5 BIG-IP 16.1.x versions prior to 16.1.2 and 15.1.x versions prior to 15.1.5.1, when the DNS resolver configuration is used, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have ...

5.4

CVE-2022-28707

  • EPSS 0.71%
  • Published 05.05.2022 17:15:14
  • Last modified 21.11.2024 06:57:46

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, and 14.1.x versions prior to 14.1.4.6, a stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility (also referr...

5.9

CVE-2022-28708

  • EPSS 0.46%
  • Published 05.05.2022 17:15:14
  • Last modified 21.11.2024 06:57:46

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2 and 15.1.x versions prior to 15.1.5.1, when a BIG-IP DNS resolver-enabled, HTTP-Explicit or SOCKS profile is configured on a virtual server, an undisclosed DNS response can cause the Traffic Management M...

6.5

CVE-2022-28859

  • EPSS 0.27%
  • Published 05.05.2022 17:15:14
  • Last modified 21.11.2024 06:58:04

On F5 BIG-IP 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6, when installing Net HSM, the scripts (nethsm-safenet-install.sh and nethsm-thales-install.sh) expose the Net HSM partition password. Note: Software versions which h...

7.5

CVE-2022-29473

  • EPSS 0.67%
  • Published 05.05.2022 17:15:14
  • Last modified 21.11.2024 06:59:08

On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when an IPSec ALG profile is configured on a virtual server, undisclosed responses can cause Traffic Management Microkernel(TMM) t...

4.3

CVE-2022-27659

  • EPSS 0.17%
  • Published 05.05.2022 17:15:13
  • Last modified 21.11.2024 06:56:07

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, and 14.1.x versions prior to 14.1.4.6, an authenticated attacker can modify or delete Dashboards created by other BIG-IP users in the Traffic Management User Interface...

6.8

CVE-2022-27878

  • EPSS 0.37%
  • Published 05.05.2022 17:15:13
  • Last modified 21.11.2024 06:56:23

On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, a stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Confi...

9.1

CVE-2022-26415

  • EPSS 0.87%
  • Published 05.05.2022 17:15:12
  • Last modified 21.11.2024 06:53:54

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x, when running in Appliance mode, an authenticated user assigned the Admi...