F5

Big-ip Advanced Web Application Firewall

109 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.9

CVE-2022-23031

  • EPSS 0.37%
  • Veröffentlicht 25.01.2022 20:15:10
  • Zuletzt bearbeitet 21.11.2024 06:47:50

On BIG-IP FPS, ASM, and Advanced WAF versions 16.1.x before 16.1.1, 15.1.x before 15.1.4, and 14.1.x before 14.1.4.4, an XML External Entity (XXE) vulnerability exists in an undisclosed page of the F5 Advanced Web Application Firewall (Advanced WAF) ...

6.5

CVE-2022-23023

  • EPSS 0.32%
  • Veröffentlicht 25.01.2022 20:15:09
  • Zuletzt bearbeitet 21.11.2024 06:47:49

On BIG-IP version 16.1.x before 16.1.2.1, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x and 12.1.x, and BIG-IQ all versions of 8.x and 7.x, undisclosed requests by an authenticated iControl REST user can cause an increase i...

7.5

CVE-2022-23025

  • EPSS 0.75%
  • Veröffentlicht 25.01.2022 20:15:09
  • Zuletzt bearbeitet 21.11.2024 06:47:49

On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, when a SIP ALG profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to ter...

4.3

CVE-2022-23026

  • EPSS 0.3%
  • Veröffentlicht 25.01.2022 20:15:09
  • Zuletzt bearbeitet 21.11.2024 06:47:50

On BIG-IP ASM & Advanced WAF version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x and 12.1.x, an authenticated user with low privileges, such as a guest, can upload data using an undisclosed REST en...

5.3

CVE-2022-23027

  • EPSS 0.63%
  • Veröffentlicht 25.01.2022 20:15:09
  • Zuletzt bearbeitet 21.11.2024 06:47:50

On BIG-IP versions 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, 13.1.x beginning in 13.1.3.6, 12.1.5.3-12.1.6, and 11.6.5.2, when a FastL4 profile and an HTTP, FIX, and/or hash persistence profile are configured on the same virtual server, undisclos...

5.3

CVE-2022-23029

  • EPSS 0.51%
  • Veröffentlicht 25.01.2022 20:15:09
  • Zuletzt bearbeitet 21.11.2024 06:47:50

On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a FastL4 profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resourc...

5.3

CVE-2022-23030

  • EPSS 0.59%
  • Veröffentlicht 25.01.2022 20:15:09
  • Zuletzt bearbeitet 21.11.2024 06:47:50

On version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when the BIG-IP Virtual Edition (VE) uses the ixlv driver (which is used in SR-IOV mode and requires Intel X710/XL710/XXV710 family of networ...

7.5

CVE-2002-20001

Exploit
  • EPSS 14.68%
  • Veröffentlicht 11.11.2021 19:15:07
  • Zuletzt bearbeitet 22.08.2025 10:33:16

The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ate...

8.8

CVE-2021-23029

  • EPSS 0.28%
  • Veröffentlicht 14.09.2021 23:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:10

On version 16.0.x before 16.0.1.2, insufficient permission checks may allow authenticated users with guest privileges to perform Server-Side Request Forgery (SSRF) attacks through F5 Advanced Web Application Firewall (WAF) and the BIG-IP ASM Configur...

8.8

CVE-2021-23026

  • EPSS 0.3%
  • Veröffentlicht 14.09.2021 22:15:07
  • Zuletzt bearbeitet 21.11.2024 05:51:10

BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x and all versions of BIG-IQ 8.x, 7.x, and 6.x are vulnerable to cross-site request forgery (CSRF) attack...