Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

f5 big-ip fraud protection services vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2023-46748
An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary system commands. Not...
F5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Carrier-grade NatF5 Big-ip Ddos Hybrid DefenderF5 Big-ip Ssl OrchestratorF5 Big-ip Local Traffic ManagerF5 Big-ip Policy Enforcement ManagerF5 Big-ip Automation ToolchainF5 Big-ip Container Ingress ServicesF5 Big-ip Advanced Web Application FirewallF5 Big-ip Domain Name SystemF5 Big-ip Application Security ManagerF5 Big-ip AnalyticsF5 Big-ip Application Acceleration ManagerF5 Big-ip Application Visibility And ReportingF5 Big-ip Fraud Protection ServicesF5 Big-ip Global Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip WebacceleratorF5 Big-ip Websafe
9.8
CVSSv3
CVE-2023-46747
Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands. Note: Software versions which have reached End of Techni...
F5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Web Application FirewallF5 Big-ip Carrier-grade NatF5 Big-ip Ddos Hybrid DefenderF5 Big-ip Ssl OrchestratorF5 Big-ip Domain Name SystemF5 Big-ip Local Traffic ManagerF5 Big-ip Policy Enforcement ManagerF5 Big-ip Automation ToolchainF5 Big-ip Container Ingress ServicesF5 Big-ip Application Security ManagerF5 Big-ip AnalyticsF5 Big-ip Application Acceleration ManagerF5 Big-ip Application Visibility And ReportingF5 Big-ip Fraud Protection ServicesF5 Big-ip Global Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip WebacceleratorF5 Big-ip Websafe
7.5
CVSSv3
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Ietf Http 2.0Nghttp2 Nghttp2Netty NettyEnvoyproxy Envoy 1.27.0Envoyproxy Envoy 1.26.4Envoyproxy Envoy 1.25.9Envoyproxy Envoy 1.24.10Eclipse JettyCaddyserver CaddyGolang Http2Golang GoGolang NetworkingF5 Big-ip AnalyticsF5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Global Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Domain Name SystemF5 Big-ip Application Security ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall Manager
7.5
CVSSv3
CVE-2022-34844
In BIG-IP Versions 16.1.x prior to 16.1.3.1 and 15.1.x prior to 15.1.6.1, and all versions of BIG-IQ 8.x, when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) driver is used with BIG-IP or BIG-IQ on Amazon Web Services (AWS) systems, undisclosed traffic can ca...
F5 Big-iq Centralized Management 7.0.0F5 Big-iq Centralized Management 8.0.0F5 Big-iq Centralized Management 7.1.0F5 Big-iq Centralized Management 8.1.0F5 Big-iq Centralized Management 8.2.0F5 Big-ip AnalyticsF5 Big-ip Link ControllerF5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Application Security ManagerF5 Big-ip Domain Name SystemF5 Big-ip Fraud Protection ServiceF5 Big-ip Global Traffic ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Policy Enforcement Manager
7.5
CVSSv3
CVE-2021-23051
On BIG-IP versions 15.1.0.4 up to and including 15.1.3, when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) driver is used with BIG-IP on Amazon Web Services (AWS) systems, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. ...
F5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Advanced Web Application FirewallF5 Big-ip AnalyticsF5 Big-ip Application Acceleration ManagerF5 Big-ip Application Security ManagerF5 Big-ip Domain Name SystemF5 Big-ip Fraud Protection ServiceF5 Big-ip Global Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Local Traffic Manager
9.8
CVSSv3
CVE-2021-22986
On BIG-IP versions 16.0.x prior to 16.0.1.1, 15.1.x prior to 15.1.2.1, 14.1.x prior to 14.1.4, 13.1.x prior to 13.1.3.6, and 12.1.x prior to 12.1.5.3 amd BIG-IQ 7.1.0.x prior to 7.1.0.3 and 7.0.0.x prior to 7.0.0.2, the iControl REST interface has an unauthenticated remote comman...
F5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip AnalyticsF5 Big-ip Application Security ManagerF5 Big-ip Domain Name SystemF5 Big-ip Global Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Link ControllerF5 Big-ip Advanced Web Application FirewallF5 Big-ip Ddos Hybrid DefenderF5 Big-ip Local Traffic ManagerF5 Big-ip Policy Enforcement ManagerF5 Big-iq Centralized ManagementF5 Ssl Orchestrator
7.5
CVSSv3
CVE-2020-5856
On BIG-IP 15.0.0-15.0.1.1 and 14.1.0-14.1.2.2, while processing specifically crafted traffic using the default 'xnet' driver, Virtual Edition instances hosted in Amazon Web Services (AWS) may experience a TMM restart.
F5 Big-ip Access Policy ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip AnalyticsF5 Big-ip Application Acceleration ManagerF5 Big-ip Application Security ManagerF5 Big-ip Domain Name SystemF5 Big-ip Fraud Protection ServiceF5 Big-ip Global Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Local Traffic ManagerF5 Big-ip Policy Enforcement Manager
4.4
CVSSv3
CVE-2019-11109
Logic issue in the subsystem for Intel(R) SPS prior to SPS_E5_04.01.04.275.0, SPS_SoC-X_04.00.04.100.0 and SPS_SoC-A_04.00.04.191.0 may allow a privileged user to potentially enable denial of service via local access.
Intel Server Platform Services FirmwareF5 Big-ip B2250 Firmware -F5 Big-ip B4300 Firmware -F5 Big-ip B4340n Firmware -F5 Big-ip B4450n Firmware -F5 Big-ip 10000s Firmware -F5 Big-ip 10050s Firmware -F5 Big-ip 10150v-n Firmware -F5 Big-ip 10200v-s Firmware -F5 Big-ip 10250v Firmware -F5 Big-ip 10350v-n Firmware -F5 Big-ip 12250v Firmware -F5 Viprion 2200 Firmware -F5 Big-ip I5600 Firmware -F5 Big-ip I5800 Firmware -F5 Big-ip I7600 Firmware -F5 Big-ip I7800 Firmware -F5 Big-ip I10600 Firmware -F5 Big-ip I10800 Firmware -F5 Big-ip I11600 Firmware -F5 Big-ip I11800 Firmware -F5 Big-ip I15600 Firmware -
4.3
CVSSv3
CVE-2019-6598
In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise Manager 3.1.1, malformed requests to the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, may lead to disruption of TMUI ser...
F5 Big-ip Local Traffic ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall ManagerF5 Big-ip AnalyticsF5 Big-ip Access Policy ManagerF5 Big-ip Application Security ManagerF5 Big-ip Domain Name SystemF5 Big-ip Edge GatewayF5 Big-ip Fraud Protection ServiceF5 Big-ip Global Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Policy Enforcement ManagerF5 Big-ip WebacceleratorF5 Enterprise Manager 3.1.1
5.9
CVSSv3
CVE-2019-1559
If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 by...
Openssl OpensslCanonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Canonical Ubuntu Linux 16.04Debian Debian Linux 8.0Debian Debian Linux 9.0Netapp Hyper Converged Infrastructure -Netapp Cloud Backup -Netapp Santricity Smi-s Provider -Netapp Element Software -Netapp Snapdrive -Netapp Snapcenter -Netapp Storage Automation Store -Netapp Ontap Select Deploy -Netapp Steelstore Cloud Integrated Storage -Netapp Oncommand Unified Manager -Netapp Oncommand Workflow Automation -Netapp Storagegrid -Netapp StoragegridNetapp Oncommand Insight -Netapp Ontap Select Deploy Administration Utility -Netapp Service Processor -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook