| CVE-2023-40542 |
When TCP Verified Accept is enabled on a TCP profile that is configured on a Virtual Server, undisclosed requests can…
|
7.5
High
|
Oct 10, 2023 |
| CVE-2023-40537 |
An authenticated user's session cookie may remain valid for a limited time after logging out from the BIG-IP…
|
8.1
High
|
Oct 10, 2023 |
| CVE-2023-40534 |
When a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, and an iRule using…
|
7.5
High
|
Oct 10, 2023 |
| CVE-2023-39447 |
When BIG-IP APM Guided Configurations are configured, undisclosed sensitive information may be logged in restnoded…
|
4.4
Medium
|
Oct 10, 2023 |
| CVE-2023-38423 |
A cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows…
|
5.4
Medium
|
Aug 2, 2023 |
| CVE-2023-38419 |
An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending…
|
4.3
Medium
|
Aug 2, 2023 |
| CVE-2023-38138 |
A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility…
|
7.5
High
|
Aug 2, 2023 |
| CVE-2023-3470 |
Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards generate a deterministic password for the Crypto User…
|
6.0
Medium
|
Aug 2, 2023 |
| CVE-2023-29163 |
When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed…
|
7.5
High
|
May 3, 2023 |
| CVE-2023-28742 |
When DNS is provisioned, an authenticated remote command execution vulnerability exists in DNS iQuery mesh
|
7.2
High
|
May 3, 2023 |
| CVE-2023-28406 |
A directory traversal vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which may allow an…
|
4.3
Medium
|
May 3, 2023 |
| CVE-2023-27378 |
Multiple reflected cross-site scripting (XSS) vulnerabilities exist in undisclosed pages of the BIG-IP Configuration…
|
7.5
High
|
May 3, 2023 |
| CVE-2023-24594 |
When an SSL profile is configured on a Virtual Server, undisclosed traffic can cause an increase in CPU or SSL…
|
5.3
Medium
|
May 3, 2023 |
| CVE-2023-23555 |
On BIG-IP Virtual Edition versions 15.1x beginning in 15.1.4 to before 15.1.8 and 14.1.x beginning in 14.1.5 to before…
|
7.5
High
|
Feb 1, 2023 |
| CVE-2023-23552 |
On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.0 before 15.1.8, 14.1.x before 14.1.5.3, and all…
|
7.5
High
|
Feb 1, 2023 |
| CVE-2023-22842 |
On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x,…
|
7.5
High
|
Feb 1, 2023 |
| CVE-2023-22839 |
On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and…
|
7.5
High
|
Feb 1, 2023 |
| CVE-2023-22664 |
On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, and BIG-IP SPK starting in version 1.6.0, when a…
|
7.5
High
|
Feb 1, 2023 |
| CVE-2023-22422 |
On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, when a HTTP profile with the non-default…
|
7.5
High
|
Feb 1, 2023 |
| CVE-2023-22418 |
On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.7, 14.1.x before 14.1.5.3, and all…
|
6.1
Medium
|
Feb 1, 2023 |
| CVE-2023-22374 |
A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP…
|
7.5
High
|
Feb 1, 2023 |
| CVE-2023-22341 |
On version 14.1.x before 14.1.5.3, and all versions of 13.1.x, when the BIG-IP APM system is configured with all the…
|
7.5
High
|
Feb 1, 2023 |
| CVE-2023-22340 |
On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x,…
|
7.5
High
|
Feb 1, 2023 |
| CVE-2023-22326 |
In BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and…
|
4.9
Medium
|
Feb 1, 2023 |
| CVE-2023-22323 |
In BIP-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and…
|
7.5
High
|
Feb 1, 2023 |