| CVE-2024-23982 |
When a BIG-IP PEM classification profile is configured on a UDP virtual server, undisclosed requests can cause the…
|
7.5
Élevée
|
14 févr. 2024 |
| CVE-2024-23805 |
Undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate
|
7.5
Élevée
|
14 févr. 2024 |
| CVE-2024-21763 |
When BIG-IP AFM Device DoS or DoS profile is configured with NXDOMAIN attack vector and bad actor detection, undisclosed…
|
7.5
Élevée
|
14 févr. 2024 |
| CVE-2024-23603 |
An SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility
|
3.8
Faible
|
14 févr. 2024 |
| CVE-2024-23308 |
When a BIG-IP Advanced WAF or BIG-IP ASM policy with a Request Body Handling option is attached to a virtual server,…
|
7.5
Élevée
|
14 févr. 2024 |
| CVE-2024-21789 |
When a BIG-IP ASM/Advanced WAF security policy is configured on a virtual server, undisclosed requests can cause an…
|
7.5
Élevée
|
14 févr. 2024 |
| CVE-2024-24775 |
When a virtual server is enabled with VLAN group and SNAT listener is configured, undisclosed traffic can cause the…
|
7.5
Élevée
|
14 févr. 2024 |
| CVE-2024-23314 |
When HTTP/2 is configured on BIG-IP or BIG-IP Next SPK systems, undisclosed responses can cause the Traffic Management…
|
7.5
Élevée
|
14 févr. 2024 |
| CVE-2024-23979 |
When SSL Client Certificate LDAP or Certificate Revocation List Distribution Point (CRLDP) authentication profile is…
|
7.5
Élevée
|
14 févr. 2024 |
| CVE-2024-22093 |
When running in appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed…
|
8.7
Élevée
|
14 févr. 2024 |
| CVE-2024-21849 |
When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed…
|
7.5
Élevée
|
14 févr. 2024 |
| CVE-2024-21771 |
For unspecified traffic patterns, BIG-IP AFM IPS engine may spend an excessive amount of time matching the traffic…
|
7.5
Élevée
|
14 févr. 2024 |
| CVE-2024-23976 |
When running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass…
|
6.0
Moyenne
|
14 févr. 2024 |
| CVE-2024-21782 |
BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy (scp) utility but…
|
6.7
Moyenne
|
14 févr. 2024 |
| CVE-2024-22389 |
When BIG-IP is deployed in high availability (HA) and an iControl REST API token is updated, the change does not sync to…
|
7.2
Élevée
|
14 févr. 2024 |
| CVE-2023-46748 |
Exploitée
F5 BIG-IP Configuration Utility SQL Injection Vulnerability
|
8.8
Élevée
|
26 oct. 2023 |
| CVE-2023-46747 |
Exploitée
F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability
|
9.8
Critique
|
26 oct. 2023 |
| CVE-2023-45219 |
Exposure of Sensitive Information vulnerability exist in an undisclosed BIG-IP TMOS shell (tmsh) command which may allow…
|
4.4
Moyenne
|
10 oct. 2023 |
| CVE-2023-43746 |
When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance…
|
8.7
Élevée
|
10 oct. 2023 |
| CVE-2023-43485 |
When TACACS+ audit forwarding is configured on BIG-IP or BIG-IQ system, sharedsecret is logged in plaintext in the audit…
|
5.5
Moyenne
|
10 oct. 2023 |
| CVE-2023-42768 |
When a non-admin user has been assigned an administrator role via an iControl REST PUT request and later the user's role…
|
7.2
Élevée
|
10 oct. 2023 |
| CVE-2023-41964 |
The BIG-IP and BIG-IQ systems do not encrypt some sensitive information written to Database (DB) variables. Note:…
|
4.3
Moyenne
|
10 oct. 2023 |
| CVE-2023-41373 |
A directory traversal vulnerability exists in the BIG-IP Configuration Utility that may allow an authenticated…
|
8.8
Élevée
|
10 oct. 2023 |
| CVE-2023-41253 |
When on BIG-IP DNS or BIG-IP LTM enabled with DNS Services License, and a TSIG key is created, it is logged in plaintext…
|
5.5
Moyenne
|
10 oct. 2023 |
| CVE-2023-41085 |
When IPSec is configured on a Virtual Server, undisclosed traffic can cause TMM to terminate. Note: Software versions…
|
7.5
Élevée
|
10 oct. 2023 |