F5

Big-ip Application Security Manager

492 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2023-24594

  • EPSS 0.14%
  • Published 03.05.2023 15:15:12
  • Last modified 21.11.2024 07:48:12

When an SSL profile is configured on a Virtual Server, undisclosed traffic can cause an increase in CPU or SSL accelerator resource utilization.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

6.1

CVE-2023-27378

  • EPSS 0.35%
  • Published 03.05.2023 15:15:12
  • Last modified 21.11.2024 07:52:47

Multiple reflected cross-site scripting (XSS) vulnerabilities exist in undisclosed pages of the BIG-IP Configuration utility which allow an attacker to run JavaScript in the context of the currently logged-in user.  Note: Software versions which hav...

4.3

CVE-2023-28406

  • EPSS 0.6%
  • Published 03.05.2023 15:15:12
  • Last modified 21.11.2024 07:55:00

A directory traversal vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which may allow an authenticated attacker to read files with .xml extension. Access to restricted information is limited and the attacker does not c...

7.5

CVE-2023-22340

  • EPSS 0.36%
  • Published 01.02.2023 18:15:11
  • Last modified 21.11.2024 07:44:35

On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause TMM to terminate. Note: Sof...

8.5

CVE-2023-22374

  • EPSS 5.01%
  • Published 01.02.2023 18:15:11
  • Last modified 21.11.2024 07:44:39

A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, potentially execute arbitrary code. In appliance mode BIG-IP, a successful exploit of this vulnerability can allow...

6.1

CVE-2023-22418

  • EPSS 0.2%
  • Published 01.02.2023 18:15:11
  • Last modified 21.11.2024 07:44:46

On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.7, 14.1.x before 14.1.5.3, and all versions of 13.1.x, an open redirect vulnerability exists on virtual servers enabled with a BIG-IP APM access policy. This vulnerabilit...

7.5

CVE-2023-22422

  • EPSS 0.31%
  • Published 01.02.2023 18:15:11
  • Last modified 21.11.2024 07:44:47

On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, when a HTTP profile with the non-default Enforcement options of Enforce HTTP Compliance and Unknown Methods: Reject are configured on a virtual server, undisclosed requests can cau...

7.5

CVE-2023-22664

  • EPSS 0.36%
  • Published 01.02.2023 18:15:11
  • Last modified 21.11.2024 07:45:09

On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, and BIG-IP SPK starting in version 1.6.0, when a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, undisclosed requests can cause an incre...

7.5

CVE-2023-22842

  • EPSS 0.31%
  • Published 01.02.2023 18:15:11
  • Last modified 21.11.2024 07:45:30

On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Mic...

7.5

CVE-2023-23552

  • EPSS 44.96%
  • Published 01.02.2023 18:15:11
  • Last modified 21.11.2024 07:46:24

On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.0 before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a BIG-IP Advanced WAF or BIG-IP ASM security policy is configured on a virtual server, undisclosed requests can...