F5

Big-ip Link Controller

445 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2022-34862

Exploit
  • EPSS 0.99%
  • Veröffentlicht 04.08.2022 18:15:10
  • Zuletzt bearbeitet 21.11.2024 07:10:19

In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when an LTM virtual server is configured to perform normalization, undisclosed requests can cause the Traffic Management Microkernel ...

9.1

CVE-2022-34865

  • EPSS 0.22%
  • Veröffentlicht 04.08.2022 18:15:10
  • Zuletzt bearbeitet 21.11.2024 07:10:19

In BIG-IP Versions 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, Traffic Intelligence feeds, which use HTTPS, do not verify the remote endpoint identity, allowing for potential data poisoning. Note: Software versions which...

7.5

CVE-2022-35236

  • EPSS 0.65%
  • Veröffentlicht 04.08.2022 18:15:10
  • Zuletzt bearbeitet 21.11.2024 07:10:56

In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when an HTTP2 profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions wh...

7.5

CVE-2022-35240

  • EPSS 0.65%
  • Veröffentlicht 04.08.2022 18:15:10
  • Zuletzt bearbeitet 21.11.2024 07:10:57

In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when the Message Routing (MR) Message Queuing Telemetry Transport (MQTT) profile is configured on a virtual server, undisclosed requests can cause an increas...

9.1

CVE-2022-35243

  • EPSS 0.44%
  • Veröffentlicht 04.08.2022 18:15:10
  • Zuletzt bearbeitet 21.11.2024 07:10:57

In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.5.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions...

5.5

CVE-2022-35272

  • EPSS 0.33%
  • Veröffentlicht 04.08.2022 18:15:10
  • Zuletzt bearbeitet 21.11.2024 07:11:01

In BIG-IP Versions 17.0.x before 17.0.0.1 and 16.1.x before 16.1.3.1, when source-port preserve-strict is configured on an HTTP Message Routing Framework (MRF) virtual server, undisclosed traffic may cause the Traffic Management Microkernel (TMM) to ...

9.8

CVE-2022-35728

  • EPSS 0.68%
  • Veröffentlicht 04.08.2022 18:15:10
  • Zuletzt bearbeitet 21.11.2024 07:11:33

In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ version 8.x before 8.2.0 and all versions of 7.x, an authenticated user's iControl REST token ma...

7.2

CVE-2022-35735

  • EPSS 1.63%
  • Veröffentlicht 04.08.2022 18:15:10
  • Zuletzt bearbeitet 21.11.2024 07:11:34

In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, an authenticated attacker with Resource Administrator or Manager privileges can create or modify existing monitor objects in the Co...

7.5

CVE-2022-32455

  • EPSS 0.36%
  • Veröffentlicht 04.08.2022 18:15:09
  • Zuletzt bearbeitet 21.11.2024 07:06:23

In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when a BIG-IP LTM Client SSL profile is configured on a virtual server to perform client certificate authentication with session tick...

6.7

CVE-2022-33962

  • EPSS 0.07%
  • Veröffentlicht 04.08.2022 18:15:09
  • Zuletzt bearbeitet 21.11.2024 07:08:40

In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, certain iRules commands may allow an attacker to bypass the access control restrictions for a self IP addre...