F5

Big-ip Policy Enforcement Manager

452 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2022-35272

  • EPSS 0.33%
  • Veröffentlicht 04.08.2022 18:15:10
  • Zuletzt bearbeitet 21.11.2024 07:11:01

In BIG-IP Versions 17.0.x before 17.0.0.1 and 16.1.x before 16.1.3.1, when source-port preserve-strict is configured on an HTTP Message Routing Framework (MRF) virtual server, undisclosed traffic may cause the Traffic Management Microkernel (TMM) to ...

9.8

CVE-2022-35728

  • EPSS 0.68%
  • Veröffentlicht 04.08.2022 18:15:10
  • Zuletzt bearbeitet 21.11.2024 07:11:33

In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ version 8.x before 8.2.0 and all versions of 7.x, an authenticated user's iControl REST token ma...

7.2

CVE-2022-35735

  • EPSS 1.63%
  • Veröffentlicht 04.08.2022 18:15:10
  • Zuletzt bearbeitet 21.11.2024 07:11:34

In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, an authenticated attacker with Resource Administrator or Manager privileges can create or modify existing monitor objects in the Co...

7.5

CVE-2022-32455

  • EPSS 0.36%
  • Veröffentlicht 04.08.2022 18:15:09
  • Zuletzt bearbeitet 21.11.2024 07:06:23

In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when a BIG-IP LTM Client SSL profile is configured on a virtual server to perform client certificate authentication with session tick...

6.7

CVE-2022-33962

  • EPSS 0.07%
  • Veröffentlicht 04.08.2022 18:15:09
  • Zuletzt bearbeitet 21.11.2024 07:08:40

In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, certain iRules commands may allow an attacker to bypass the access control restrictions for a self IP addre...

4.9

CVE-2022-33968

  • EPSS 0.31%
  • Veröffentlicht 04.08.2022 18:15:09
  • Zuletzt bearbeitet 21.11.2024 07:08:41

In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, when an LTM monitor or APM SSO is configured on a virtual server, and NTLM challenge-response is in use, un...

4.3

CVE-2022-29474

  • EPSS 0.14%
  • Veröffentlicht 05.05.2022 17:15:15
  • Zuletzt bearbeitet 21.11.2024 06:59:08

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a directory traversal vulnerability exists in iControl SOAP ...

5.3

CVE-2022-29479

  • EPSS 0.87%
  • Veröffentlicht 05.05.2022 17:15:15
  • Zuletzt bearbeitet 21.11.2024 06:59:09

On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Management all versions of 8.x and 7.x, when an IPv6 self IP address ...

5.3

CVE-2022-29480

  • EPSS 0.87%
  • Veröffentlicht 05.05.2022 17:15:15
  • Zuletzt bearbeitet 21.11.2024 06:59:09

On F5 BIG-IP 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when multiple route domains are configured, undisclosed requests to big3d can cause an increase in CPU resource utilization. Note: Software versions which have reach...

7.5

CVE-2022-28691

  • EPSS 0.65%
  • Veröffentlicht 05.05.2022 17:15:14
  • Zuletzt bearbeitet 21.11.2024 06:57:45

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when a Real Time Streaming Protocol (RTSP) profile is configured on a virtual server, undisclosed...