Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: F5 BIG-IP 16.1.3.3, 17.0.0.2 Clear all filters
TI-2023-08839 CVE-2023-22664 · GHSA-3447-4454-25p2

BIG-IP HTTP/2 profile vulnerability

Priority MEDIUM 40

On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, and BIG-IP SPK starting in version 1.6.0, when a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, undisclos…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00626 Published 2023-02-01 Fixed in 17.0.0.2, 16.1.3.3 CWE-400
TI-2023-08681 CVE-2023-22422 · GHSA-8vfq-rv3q-w9xp

HTTP profile vulnerability

Priority MEDIUM 40

On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, when a HTTP profile with the non-default Enforcement options of Enforce HTTP Compliance and Unknown Methods: Reject are configured on a virtual server…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00626 Published 2023-02-01 Fixed in 17.0.0.2, 16.1.3.3 CWE-120
TI-2023-08567 CVE-2023-22302 · GHSA-mm8q-cf7f-pmxx

BIG-IP HTTP profile vulnerability

Priority LOW 27

In BIG-IP versions 17.0.x before 17.0.0.2, and 16.1.x beginning in 16.1.2.2 to before 16.1.3.3, when an HTTP profile is configured on a virtual server and conditions beyond the attacker’s control exist on the target pool…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0053 Published 2023-02-01 Fixed in 17.0.0.2, 16.1.3.3 CWE-772