Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: F5 BIG-IP 15.1.10.4, 16.1.4.3, 17.1.1.3 Clear all filters
TI-2024-20533 CVE-2024-31156 · GHSA-2xgc-j2vj-q7gf

BIG-IP Configuration utility XSS vulnerability

Priority LOW 38

A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00582 Published 2024-05-08 Fixed in 17.1.1.3, 16.1.4.3 +1 CWE-79
TI-2024-22191 CVE-2024-33604 · GHSA-4vgj-rwj6-4gwr

BIG-IP Configuration utility XSS vulnerability

Priority LOW 27

A reflected cross-site scripting (XSS) vulnerability exist in undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00314 Published 2024-05-08 Fixed in 17.1.1.3, 16.1.4.3 +1 CWE-79
TI-2024-19084 CVE-2024-28889 · GHSA-j5j7-c96c-3p39

BIG-IP SSL vulnerability

Priority LOW 27

When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel (TMM…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00443 Published 2024-05-08 Fixed in 17.1.1.3, 16.1.4.3 +1 CWE-825
TI-2024-18057 CVE-2024-27202 · GHSA-frv4-f3cq-3x3v

BIG-IP TMUI XSS vulnerability

Priority LOW 21

A DOM-based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00272 Published 2024-05-08 Fixed in 17.1.1.3, 16.1.4.3 +1 CWE-79