Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

big-ip fraud protection service vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2020-5946
In BIG-IP Advanced WAF and FPS versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, under some circumstances, certain format client-side alerts sent to the BIG-IP virtual server configured with DataSafe may cause the Traffic Management Microkernel (TMM) to restart, res...
F5 Big-ip Advanced Web Application FirewallF5 Big-ip Fraud Protection Service
4.9
CVSSv3
CVE-2022-23031
On BIG-IP FPS, ASM, and Advanced WAF versions 16.1.x prior to 16.1.1, 15.1.x prior to 15.1.4, and 14.1.x prior to 14.1.4.4, an XML External Entity (XXE) vulnerability exists in an undisclosed page of the F5 Advanced Web Application Firewall (Advanced WAF) and BIG-IP ASM Traffic M...
F5 Big-ip Advanced Web Application FirewallF5 Big-ip Application Security ManagerF5 Big-ip Fraud Protection Service
7.5
CVSSv3
CVE-2019-6673
On versions 15.0.0-15.0.1 and 14.0.0-14.1.2, when the BIG-IP is configured in HTTP/2 Full Proxy mode, specifically crafted requests may cause a disruption of service provided by the Traffic Management Microkernel (TMM).
F5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Application Security ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Link ControllerF5 Big-ip Local Traffic ManagerF5 Big-ip Policy Enforcement Manager
7.5
CVSSv3
CVE-2020-5891
On BIG-IP 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, undisclosed HTTP/2 requests can lead to a denial of service when sent to a virtual server configured with the Fallback Host setting and a server-side HTTP/2 profile.
F5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip AnalyticsF5 Big-ip Application Acceleration ManagerF5 Big-ip Application Security ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Link ControllerF5 Big-ip Local Traffic ManagerF5 Big-ip Policy Enforcement Manager
7.5
CVSSv3
CVE-2023-23555
On BIG-IP Virtual Edition versions 15.1x beginning in 15.1.4 to prior to 15.1.8 and 14.1.x beginning in 14.1.5 to prior to 14.1.5.3, and BIG-IP SPK beginning in 1.5.0 to prior to 1.6.0, when FastL4 profile is configured on a virtual server, undisclosed traffic can cause the Traff...
F5 Big-ip Advanced Firewall ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Access Policy ManagerF5 Big-ip AnalyticsF5 Big-ip Application Security ManagerF5 Big-ip Ddos Hybrid DefenderF5 Big-ip Domain Name SystemF5 Big-ip Link ControllerF5 Big-ip Local Traffic ManagerF5 Big-ip Policy Enforcement ManagerF5 Big-ip Ssl OrchestratorF5 Big-ip Application Acceleration ManagerF5 Big-ip Service Proxy
7.5
CVSSv3
CVE-2023-22664
On BIG-IP versions 17.0.x prior to 17.0.0.2 and 16.1.x prior to 16.1.3.3, and BIG-IP SPK starting in version 1.6.0, when a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, undisclosed requests can cause an increase in memory resource uti...
F5 Big-ip Advanced Firewall ManagerF5 Big-ip Access Policy ManagerF5 Big-ip AnalyticsF5 Big-ip Application Acceleration ManagerF5 Big-ip Application Security ManagerF5 Big-ip Ddos Hybrid DefenderF5 Big-ip Domain Name SystemF5 Big-ip Fraud Protection ServiceF5 Big-ip Link ControllerF5 Big-ip Local Traffic ManagerF5 Big-ip Policy Enforcement ManagerF5 Big-ip Ssl OrchestratorF5 Big-ip Service Proxy 1.6.0
4.9
CVSSv3
CVE-2022-26835
On F5 BIG-IP 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, 14.1.x versions before 14.1.4.6, 13.1.x versions before 13.1.5, and all versions of 12.1.x and 11.6.x, directory traversal vulnerabilities exist in undisclosed iControl REST endpoints and TMOS Shell (t...
F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Local Traffic Manager 12.1.2F5 Big-ip Advanced Firewall Manager 12.1.0F5 Big-ip Access Policy Manager 12.1.2F5 Big-ip Global Traffic Manager 11.6.1F5 Big-ip Domain Name System 12.1.2F5 Big-ip Policy Enforcement Manager 12.1.1F5 Big-ip Policy Enforcement Manager 12.1.2F5 Big-ip Advanced Firewall Manager 12.1.2F5 Big-ip Application Security Manager 12.1.1F5 Big-ip Access Policy Manager 12.1.0F5 Big-ip Access Policy Manager 12.1.1F5 Big-ip Advanced Firewall Manager 11.6.1F5 Big-ip Advanced Firewall Manager 12.1.1F5 Big-ip Analytics 11.6.1F5 Big-ip Analytics 12.1.0F5 Big-ip Analytics 12.1.2F5 Big-ip Application Acceleration Manager 11.6.1F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Application Acceleration Manager 12.1.1F5 Big-ip Application Acceleration Manager 12.1.2F5 Big-ip Application Security Manager 11.6.1
7.5
CVSSv3
CVE-2022-27189
On F5 BIG-IP 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, 14.1.x versions before 14.1.4.6, 13.1.x versions before 13.1.5, and all versions of 12.1.x and 11.6.x, when an Internet Content Adaptation Protocol (ICAP) profile is configured on a virtual server, und...
F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Local Traffic Manager 12.1.2F5 Big-ip Advanced Firewall Manager 12.1.0F5 Big-ip Access Policy Manager 12.1.2F5 Big-ip Global Traffic Manager 11.6.1F5 Big-ip Domain Name System 12.1.2F5 Big-ip Policy Enforcement Manager 12.1.1F5 Big-ip Policy Enforcement Manager 12.1.2F5 Big-ip Advanced Firewall Manager 12.1.2F5 Big-ip Application Security Manager 12.1.1F5 Big-ip Access Policy Manager 12.1.0F5 Big-ip Access Policy Manager 12.1.1F5 Big-ip Advanced Firewall Manager 11.6.1F5 Big-ip Advanced Firewall Manager 12.1.1F5 Big-ip Analytics 11.6.1F5 Big-ip Analytics 12.1.0F5 Big-ip Analytics 12.1.2F5 Big-ip Application Acceleration Manager 11.6.1F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Application Acceleration Manager 12.1.1F5 Big-ip Application Acceleration Manager 12.1.2F5 Big-ip Application Security Manager 11.6.1
4.9
CVSSv3
CVE-2022-26340
On F5 BIG-IP 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, 14.1.x versions before 14.1.4.6, 13.1.x versions before 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Management all versions of 8.x and 7.x, an authenticated, high-privilege...
F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Local Traffic Manager 12.1.2F5 Big-ip Advanced Firewall Manager 12.1.0F5 Big-ip Access Policy Manager 12.1.2F5 Big-ip Global Traffic Manager 11.6.1F5 Big-ip Domain Name System 12.1.2F5 Big-ip Policy Enforcement Manager 12.1.1F5 Big-ip Policy Enforcement Manager 12.1.2F5 Big-ip Advanced Firewall Manager 12.1.2F5 Big-ip Application Security Manager 12.1.1F5 Big-ip Access Policy Manager 12.1.0F5 Big-ip Access Policy Manager 12.1.1F5 Big-ip Advanced Firewall Manager 11.6.1F5 Big-ip Advanced Firewall Manager 12.1.1F5 Big-ip Analytics 11.6.1F5 Big-ip Analytics 12.1.0F5 Big-ip Analytics 12.1.2F5 Big-ip Application Acceleration Manager 11.6.1F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Application Acceleration Manager 12.1.1F5 Big-ip Application Acceleration Manager 12.1.2F5 Big-ip Application Security Manager 11.6.1
7.5
CVSSv3
CVE-2022-26372
On F5 BIG-IP 15.1.x versions before 15.1.0.2, 14.1.x versions before 14.1.4.6, 13.1.x versions before 13.1.5, and all versions of 12.1.x and 11.6.x, when a DNS listener is configured on a virtual server with DNS queueing (default), undisclosed requests can cause an increase in me...
F5 Big-ip Local Traffic Manager 11.6.1F5 Big-ip Local Traffic Manager 12.1.2F5 Big-ip Advanced Firewall Manager 12.1.0F5 Big-ip Access Policy Manager 12.1.2F5 Big-ip Global Traffic Manager 11.6.1F5 Big-ip Domain Name System 12.1.2F5 Big-ip Policy Enforcement Manager 12.1.1F5 Big-ip Policy Enforcement Manager 12.1.2F5 Big-ip Advanced Firewall Manager 12.1.2F5 Big-ip Application Security Manager 12.1.1F5 Big-ip Access Policy Manager 12.1.0F5 Big-ip Access Policy Manager 12.1.1F5 Big-ip Advanced Firewall Manager 11.6.1F5 Big-ip Advanced Firewall Manager 12.1.1F5 Big-ip Analytics 11.6.1F5 Big-ip Analytics 12.1.0F5 Big-ip Analytics 12.1.2F5 Big-ip Application Acceleration Manager 11.6.1F5 Big-ip Application Acceleration Manager 12.1.0F5 Big-ip Application Acceleration Manager 12.1.1F5 Big-ip Application Acceleration Manager 12.1.2F5 Big-ip Application Security Manager 11.6.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook