F5

Big-ip Fraud Protection Service

325 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2024-24775

  • EPSS 0.36%
  • Published 14.02.2024 17:15:14
  • Last modified 23.01.2025 19:53:31

When a virtual server is enabled with VLAN group and SNAT listener is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not...

7.5

CVE-2024-23314

  • EPSS 0.27%
  • Published 14.02.2024 17:15:13
  • Last modified 23.01.2025 19:52:38

When HTTP/2 is configured on BIG-IP or BIG-IP Next SPK systems, undisclosed responses can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

6.7

CVE-2024-21782

  • EPSS 0.07%
  • Published 14.02.2024 17:15:12
  • Last modified 23.01.2025 19:47:50

BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy (scp) utility but do not have access to Advanced shell (bash) can execute arbitrary commands with a specially crafted command string. This vulnerabil...

8.7

CVE-2024-22093

  • EPSS 0.32%
  • Published 14.02.2024 17:15:12
  • Last modified 05.09.2025 15:43:00

When running in appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint on multi-bladed systems. A successful exploit can allow the attacker to cross a security boundary.  Note: Software...

7.2

CVE-2024-22389

  • EPSS 0.24%
  • Published 14.02.2024 17:15:12
  • Last modified 05.09.2025 15:49:32

When BIG-IP is deployed in high availability (HA) and an iControl REST API token is updated, the change does not sync to the peer device. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

7.5

CVE-2023-44487

Warning Media report Exploit
  • EPSS 94.44%
  • Published 10.10.2023 14:15:10
  • Last modified 11.06.2025 17:29:54

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

4.4

CVE-2023-45219

  • EPSS 0.11%
  • Published 10.10.2023 13:15:22
  • Last modified 21.11.2024 08:26:34

Exposure of Sensitive Information vulnerability exist in an undisclosed BIG-IP TMOS shell (tmsh) command which may allow an authenticated attacker with resource administrator role privileges to view sensitive information.   Note: Software versions ...

7.5

CVE-2023-41085

  • EPSS 0.58%
  • Published 10.10.2023 13:15:21
  • Last modified 21.11.2024 08:20:32

When IPSec is configured on a Virtual Server, undisclosed traffic can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

9.9

CVE-2023-41373

  • EPSS 2.64%
  • Published 10.10.2023 13:15:21
  • Last modified 21.11.2024 08:21:10

A directory traversal vulnerability exists in the BIG-IP Configuration Utility that may allow an authenticated attacker to execute commands on the BIG-IP system. For BIG-IP system running in Appliance mode, a successful exploit can allow the attacke...

6.5

CVE-2023-41964

  • EPSS 0.2%
  • Published 10.10.2023 13:15:21
  • Last modified 21.11.2024 08:22:00

The BIG-IP and BIG-IQ systems do not encrypt some sensitive information written to Database (DB) variables.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.