Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

TI-2022-11937 CVE-2022-29474 · GHSA-r87f-26v2-9p82

Path traversal in F5 BIG-IP

Priority LOW 23

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a directory traversal vulnerab…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01574 Published 2022-05-05 Fixed in 17.0.0, 16.1.2.2 +3 CWE-22
TI-2022-11358 CVE-2022-28716 · GHSA-585h-3q27-j2jp

Cross-site scripting in F5 BIG-IP

Priority LOW 39

On 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x 11.6.x, a DOM-based cross-site scripting (XSS) vulne…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00762 Published 2022-05-05 Fixed in 17.0.0, 16.1.2.2 +3 CWE-79
TI-2022-11347 CVE-2022-28705 · GHSA-q7gq-9x2q-7wf8

Integer overflow in F5 BIG-IP

Priority LOW 35

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, on platforms with an ePVA and the pva.fwdaccel BigDB variable ena…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0093 Published 2022-05-05 Fixed in 12.1.x, 11.6.x +5 CWE-190
TI-2022-09767 CVE-2022-26415 · GHSA-7578-q947-48mq

Command injection in F5 BIG-IP

Priority MEDIUM 41

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x, when running in Appliance mode, an authen…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.0074 Published 2022-05-05 Fixed in 16.1.2.2, 15.1.5.1 +3 CWE-77
TI-2022-09717 CVE-2022-26340 · GHSA-9hm8-f2wm-wj72

Incorrect permission assignment in F5 BIG-IP

Priority LOW 23

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Mana…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00466 Published 2022-05-05 Fixed in 17.0.0, 16.1.2.2 +3 CWE-732
Priority LOW 26

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when an Active mode-enabled FTP profile is configured on a virtua…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00915 Published 2022-05-05 Fixed in 12.1.x, 11.6.x +5 CWE-754
Priority LOW 35

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a flaw in the way reply ICMP p…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01073 Published 2022-05-05 Fixed in 17.0.0, 16.1.2.2 +3 CWE-330
TI-2022-01269 CVE-2022-1388 · GHSA-mrph-rvc3-cv97

Missing authentication in F5 BIG-IP

Priority CRITICAL 100KEV

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass i…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99954 Published 2022-05-05 Fixed in 17.0.0, 16.1.2.2 +3 CWE-306
TI-2022-10312 CVE-2022-27189 · GHSA-p9m7-cfxq-c6rf

Incorrect numeric conversion in F5 BIG-IP

Priority LOW 35

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when an Internet Content Adapt…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0093 Published 2022-05-05 Fixed in 17.0.0, 16.1.2.2 +3 CWE-681
TI-2022-10082 CVE-2022-26835 · GHSA-2v4q-7r62-3cvj

Path traversal in F5 BIG-IP

Priority LOW 26

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, directory traversal vulnerabil…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01901 Published 2022-05-05 Fixed in 17.0.0, 16.1.2.2 +3 CWE-22