F5

Big-ip Policy Enforcement Manager

452 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.9

CVE-2023-22326

  • EPSS 0.18%
  • Published 01.02.2023 18:15:10
  • Last modified 21.11.2024 07:44:32

In BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, and all versions of BIG-IQ 8.x and 7.1.x, incorrect permission assignment vulnerabilities exist in the iCon...

8.8

CVE-2022-41622

  • EPSS 81.26%
  • Published 07.12.2022 04:15:10
  • Last modified 21.11.2024 07:23:31

In all versions,  BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

8.7

CVE-2022-41800

  • EPSS 92.7%
  • Published 07.12.2022 04:15:10
  • Last modified 21.11.2024 07:23:52

In all versions of BIG-IP, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing an undisclosed iControl REST endpoint. A successful exploit can allow the a...

6.5

CVE-2022-41813

  • EPSS 0.46%
  • Published 19.10.2022 22:15:13
  • Last modified 21.11.2024 07:23:53

In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when BIG-IP is provisioned with PEM or AFM module, an undisclosed input can cause Traffic Management Microkernel (TMM) to terminate.

7.5

CVE-2022-41832

  • EPSS 0.43%
  • Published 19.10.2022 22:15:13
  • Last modified 21.11.2024 07:23:53

In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when a SIP profile is configured on a virtual server, undisclosed messages can cause an increase in memory ...

7.5

CVE-2022-41833

  • EPSS 0.51%
  • Published 19.10.2022 22:15:13
  • Last modified 21.11.2024 07:23:54

In all BIG-IP 13.1.x versions, when an iRule containing the HTTP::collect command is configured on a virtual server, undisclosed requests can cause Traffic Management Microkernel (TMM) to terminate.

3.7

CVE-2022-41983

  • EPSS 0.16%
  • Published 19.10.2022 22:15:13
  • Last modified 21.11.2024 07:24:12

On specific hardware platforms, on BIG-IP versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all versions of 13.1.x, while Intel QAT (QuickAssist Technology) and the AES-GCM/CCM cipher is in use, undisclosed conditions...

7.5

CVE-2022-41624

  • EPSS 0.35%
  • Published 19.10.2022 22:15:12
  • Last modified 21.11.2024 07:23:31

In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.2, 15.1.x before 15.1.7, 14.1.x before 14.1.5.2, and 13.1.x before 13.1.5.1, when a sideband iRule is configured on a virtual server, undisclosed traffic can cause an increase in memory ...

4.9

CVE-2022-41694

  • EPSS 0.22%
  • Published 19.10.2022 22:15:12
  • Last modified 21.11.2024 07:23:39

In BIG-IP versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, and BIG-IQ versions 8.x before 8.2.0.1 and all versions of 7.x, when an SSL key is imported on a BIG-IP or BIG-IQ system, undisclosed i...

6.5

CVE-2022-41770

  • EPSS 0.53%
  • Published 19.10.2022 22:15:12
  • Last modified 21.11.2024 07:23:48

In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ all versions of 8.x and 7.x, an authenticated iControl REST user can cause an increase in memory r...