Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

TI-2022-16174 CVE-2022-35728 · GHSA-h24c-cc8x-fq2g

iControl REST vulnerability CVE-2022-35728

Priority MEDIUM 43

In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ version 8.x before 8.2.0 and all versions of 7.x, an authenticated…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0069 Published 2022-08-04 Fixed in 14.1.5.1, 15.1.6.1 +3 CWE-613
Priority LOW 30

In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ Centralized Management all versions of 8.x, an authenticated attac…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00758 Published 2022-08-04 Fixed in 14.1.5.1, 15.1.6.1 +3 CWE-20
Priority LOW 23

In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, when an LTM monitor or APM SSO is configured on a virtual server, and NTLM ch…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00543 Published 2022-08-04 Fixed in 14.1.5.1, 15.1.6.1 +2 CWE-125
TI-2022-14958 CVE-2022-33962 · GHSA-f8cq-8hf3-3hw9

BIG-IP iRule vulnerability CVE-2022-33962

Priority LOW 29

In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, certain iRules commands may allow an attacker to bypass the access control re…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00193 Published 2022-08-04 Fixed in 14.1.5.1, 15.1.6.1 +2 CWE-269