F5

Big-ip Edge Gateway

213 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2023-40542

  • EPSS 0.58%
  • Published 10.10.2023 13:15:20
  • Last modified 19.09.2025 20:18:14

When TCP Verified Accept is enabled on a TCP profile that is configured on a Virtual Server, undisclosed requests can cause an increase in memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are no...

6.1

CVE-2023-38138

  • EPSS 0.52%
  • Published 02.08.2023 16:15:10
  • Last modified 21.11.2024 08:12:56

A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which allows an attacker to run JavaScript in the context of the currently logged-in user.  Note: Software versions which have rea...

4.3

CVE-2023-38419

  • EPSS 0.16%
  • Published 02.08.2023 16:15:10
  • Last modified 21.11.2024 08:13:31

An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending undisclosed requests.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

5.4

CVE-2023-38423

  • EPSS 0.34%
  • Published 02.08.2023 16:15:10
  • Last modified 21.11.2024 08:13:32

A cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user.  Note: Software versions which have reached End of...

6.1

CVE-2023-3470

  • EPSS 0.07%
  • Published 02.08.2023 16:15:10
  • Last modified 21.11.2024 08:17:20

Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards generate a deterministic password for the Crypto User account.  The predictable nature of the password allows an authenticated user with TMSH access to the BIG-IP system, or anyone with ...

7.5

CVE-2023-29163

  • EPSS 0.4%
  • Published 03.05.2023 15:15:13
  • Last modified 21.11.2024 07:56:38

When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

5.3

CVE-2023-24594

  • EPSS 0.14%
  • Published 03.05.2023 15:15:12
  • Last modified 21.11.2024 07:48:12

When an SSL profile is configured on a Virtual Server, undisclosed traffic can cause an increase in CPU or SSL accelerator resource utilization.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

6.1

CVE-2023-27378

  • EPSS 0.35%
  • Published 03.05.2023 15:15:12
  • Last modified 21.11.2024 07:52:47

Multiple reflected cross-site scripting (XSS) vulnerabilities exist in undisclosed pages of the BIG-IP Configuration utility which allow an attacker to run JavaScript in the context of the currently logged-in user.  Note: Software versions which hav...

4.3

CVE-2023-28406

  • EPSS 0.6%
  • Published 03.05.2023 15:15:12
  • Last modified 21.11.2024 07:55:00

A directory traversal vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which may allow an authenticated attacker to read files with .xml extension. Access to restricted information is limited and the attacker does not c...

3.7

CVE-2022-41983

  • EPSS 0.16%
  • Published 19.10.2022 22:15:13
  • Last modified 21.11.2024 07:24:12

On specific hardware platforms, on BIG-IP versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all versions of 13.1.x, while Intel QAT (QuickAssist Technology) and the AES-GCM/CCM cipher is in use, undisclosed conditions...