Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: F5 BIG-IP 14.1.4.6, 15.1.5.1 and 2 more versions Clear all filters
TI-2022-11349 CVE-2022-28707 · GHSA-jv4r-x5fw-8fq2

Cross-site scripting in F5 BIG-IP

Priority LOW 36

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, and 14.1.x versions prior to 14.1.4.6, a stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Conf…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00636 Published 2022-05-05 Fixed in 13.1.x, 12.1.x +5 CWE-79
TI-2022-10640 CVE-2022-27659 · GHSA-vg7m-9fgh-jc66

Improper privilege management in F5 BIG-IP

Priority LOW 21

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, and 14.1.x versions prior to 14.1.4.6, an authenticated attacker can modify or delete Dashboards created by other BIG-IP users in the Tra…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00485 Published 2022-05-05 Fixed in 13.1.x, 12.1.x +5 CWE-269
TI-2022-10306 CVE-2022-27182 · GHSA-6rr3-hjv7-3j5j

Uncontrolled resource consumption in F5 BIG-IP

Priority LOW 26

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, and 14.1.x versions prior to 14.1.4.6, when BIG-IP packet filters are enabled and a virtual server is configured with the type set to Rej…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00889 Published 2022-05-05 Fixed in 13.1.x, 12.1.x +5 CWE-400