Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: F5 BIG-IP Guided Configuration (GC) 9.0 Clear all filters
TI-2022-10758 CVE-2022-27878 · GHSA-vjqh-wj73-4jqj

Cross-site scripting in F5 BIG-IP

Priority LOW 33

On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, a stored cross-site scripting (XSS) vulnerability exists in an undisc…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00787 Published 2022-05-05 Fixed in 17.0.0, 9.0 CWE-79
TI-2022-10690 CVE-2022-27806 · GHSA-7gpj-49pv-jr3x

Command injection in F5 BIG-IP

Priority MEDIUM 41

On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, when running in Appliance mode, an authent…

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.01519 Published 2022-05-05 Fixed in 17.0.0, 9.0 CWE-77
TI-2022-09483 CVE-2022-25946 · GHSA-8j32-qm4m-rqjw

On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP…

Priority LOW 38

On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, when running in Appliance mode, an authent…

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.00409 Published 2022-05-05 Fixed in 17.0.0, 9.0 CWE-354
TI-2022-10351 CVE-2022-27230 · GHSA-84vw-rqhm-9cj2

Cross-site scripting in F5 BIG-IP APM

Priority LOW 34

On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP APM, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, a reflected cross-site scripting (XSS) vulnerability exists in an…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00536 Published 2022-05-05 Fixed in 17.0.0, 9.0 CWE-79