CVE-2023-22374
- EPSS 5.01%
- Veröffentlicht 01.02.2023 18:15:11
- Zuletzt bearbeitet 21.11.2024 07:44:39
A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, potentially execute arbitrary code. In appliance mode BIG-IP, a successful exploit of this vulnerability can allow...
CVE-2023-22418
- EPSS 0.2%
- Veröffentlicht 01.02.2023 18:15:11
- Zuletzt bearbeitet 21.11.2024 07:44:46
On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.7, 14.1.x before 14.1.5.3, and all versions of 13.1.x, an open redirect vulnerability exists on virtual servers enabled with a BIG-IP APM access policy. This vulnerabilit...
CVE-2023-22422
- EPSS 0.31%
- Veröffentlicht 01.02.2023 18:15:11
- Zuletzt bearbeitet 21.11.2024 07:44:47
On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, when a HTTP profile with the non-default Enforcement options of Enforce HTTP Compliance and Unknown Methods: Reject are configured on a virtual server, undisclosed requests can cau...
CVE-2023-22664
- EPSS 0.36%
- Veröffentlicht 01.02.2023 18:15:11
- Zuletzt bearbeitet 21.11.2024 07:45:09
On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, and BIG-IP SPK starting in version 1.6.0, when a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, undisclosed requests can cause an incre...
CVE-2023-22842
- EPSS 0.31%
- Veröffentlicht 01.02.2023 18:15:11
- Zuletzt bearbeitet 21.11.2024 07:45:30
On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Mic...
CVE-2023-23555
- EPSS 0.36%
- Veröffentlicht 01.02.2023 18:15:11
- Zuletzt bearbeitet 21.11.2024 07:46:24
On BIG-IP Virtual Edition versions 15.1x beginning in 15.1.4 to before 15.1.8 and 14.1.x beginning in 14.1.5 to before 14.1.5.3, and BIG-IP SPK beginning in 1.5.0 to before 1.6.0, when FastL4 profile is configured on a virtual server, undisclosed tra...
CVE-2023-22281
- EPSS 0.36%
- Veröffentlicht 01.02.2023 18:15:10
- Zuletzt bearbeitet 21.11.2024 07:44:27
On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a BIG-IP AFM NAT policy with a destination NAT rule is configured on a FastL4 virtual server, undisclosed traff...
CVE-2023-22302
- EPSS 0.36%
- Veröffentlicht 01.02.2023 18:15:10
- Zuletzt bearbeitet 21.11.2024 07:44:29
In BIG-IP versions 17.0.x before 17.0.0.2, and 16.1.x beginning in 16.1.2.2 to before 16.1.3.3, when an HTTP profile is configured on a virtual server and conditions beyond the attacker’s control exist on the target pool member, undisclosed requests ...
CVE-2023-22323
- EPSS 0.32%
- Veröffentlicht 01.02.2023 18:15:10
- Zuletzt bearbeitet 21.11.2024 07:44:31
In BIP-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when OCSP authentication profile is configured on a virtual server, undisclosed requests can cause an incre...
CVE-2023-22326
- EPSS 0.18%
- Veröffentlicht 01.02.2023 18:15:10
- Zuletzt bearbeitet 21.11.2024 07:44:32
In BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, and all versions of BIG-IQ 8.x and 7.1.x, incorrect permission assignment vulnerabilities exist in the iCon...