Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

f5 big-ip global traffic manager 14.1.4 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2021-23007
On BIG-IP versions 14.1.4 and 16.0.1.1, when the Traffic Management Microkernel (TMM) process handles certain undisclosed traffic, it may start dropping all fragmented IP traffic. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.
F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Access Policy Manager 16.0.1.1F5 Big-ip Advanced Firewall Manager 14.1.4F5 Big-ip Advanced Firewall Manager 16.0.1.1F5 Big-ip Advanced Web Application Firewall 14.1.4F5 Big-ip Advanced Web Application Firewall 16.0.1.1F5 Big-ip Analytics 14.1.4F5 Big-ip Analytics 16.0.1.1F5 Big-ip Application Acceleration Manager 14.1.4F5 Big-ip Application Acceleration Manager 16.0.1.1F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Application Security Manager 16.0.1.1F5 Big-ip Ddos Hybrid Defender 14.1.4F5 Big-ip Ddos Hybrid Defender 16.0.1.1F5 Big-ip Domain Name System 14.1.4F5 Big-ip Domain Name System 16.0.1.1F5 Big-ip Edge Gateway 14.1.4F5 Big-ip Edge Gateway 16.0.1.1F5 Big-ip Fraud Protection Service 14.1.4F5 Big-ip Fraud Protection Service 16.0.1.1F5 Big-ip Global Traffic Manager 14.1.4F5 Big-ip Global Traffic Manager 16.0.1.1
4
CVSSv2
CVE-2022-27659
On F5 BIG-IP 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, and 14.1.x versions before 14.1.4.6, an authenticated attacker can modify or delete Dashboards created by other BIG-IP users in the Traffic Management User Interface (TMUI). Note: Software versions whi...
F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Link Controller 14.1.0F5 Big-ip Policy Enforcement Manager 14.1.0F5 Big-ip Local Traffic Manager 14.1.0F5 Big-ip Analytics 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Domain Name System 14.1.0F5 Big-ip Global Traffic Manager 14.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Firewall Manager 14.1.4F5 Big-ip Advanced Firewall Manager 15.1.0F5 Big-ip Analytics 14.1.4F5 Big-ip Analytics 15.1.0F5 Big-ip Application Acceleration Manager 14.1.4F5 Big-ip Application Acceleration Manager 15.1.0F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Domain Name System 14.1.4F5 Big-ip Domain Name System 15.1.0
4
CVSSv2
CVE-2022-28859
On F5 BIG-IP 15.1.x versions before 15.1.5.1 and 14.1.x versions before 14.1.4.6, when installing Net HSM, the scripts (nethsm-safenet-install.sh and nethsm-thales-install.sh) expose the Net HSM partition password. Note: Software versions which have reached End of Technical Suppo...
F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Link Controller 14.1.0F5 Big-ip Policy Enforcement Manager 14.1.0F5 Big-ip Local Traffic Manager 14.1.0F5 Big-ip Analytics 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Domain Name System 14.1.0F5 Big-ip Global Traffic Manager 14.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Firewall Manager 14.1.4F5 Big-ip Advanced Firewall Manager 15.1.0F5 Big-ip Analytics 14.1.4F5 Big-ip Analytics 15.1.0F5 Big-ip Application Acceleration Manager 14.1.4F5 Big-ip Application Acceleration Manager 15.1.0F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Domain Name System 14.1.4F5 Big-ip Domain Name System 15.1.0
4.3
CVSSv2
CVE-2022-27182
On F5 BIG-IP 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, and 14.1.x versions before 14.1.4.6, when BIG-IP packet filters are enabled and a virtual server is configured with the type set to Reject, undisclosed requests can cause an increase in memory resource...
F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Link Controller 14.1.0F5 Big-ip Policy Enforcement Manager 14.1.0F5 Big-ip Local Traffic Manager 14.1.0F5 Big-ip Analytics 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Domain Name System 14.1.0F5 Big-ip Global Traffic Manager 14.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Firewall Manager 14.1.4F5 Big-ip Advanced Firewall Manager 15.1.0F5 Big-ip Analytics 14.1.4F5 Big-ip Analytics 15.1.0F5 Big-ip Application Acceleration Manager 14.1.4F5 Big-ip Application Acceleration Manager 15.1.0F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Domain Name System 14.1.4F5 Big-ip Domain Name System 15.1.0
5
CVSSv2
CVE-2022-26370
On F5 BIG-IP 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5, and 14.1.x versions before 14.1.4.6, when a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, un...
F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Link Controller 14.1.0F5 Big-ip Policy Enforcement Manager 14.1.0F5 Big-ip Local Traffic Manager 14.1.0F5 Big-ip Analytics 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Domain Name System 14.1.0F5 Big-ip Global Traffic Manager 14.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Firewall Manager 14.1.4F5 Big-ip Advanced Firewall Manager 15.1.0F5 Big-ip Analytics 14.1.4F5 Big-ip Analytics 15.1.0F5 Big-ip Application Acceleration Manager 14.1.4F5 Big-ip Application Acceleration Manager 15.1.0F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Domain Name System 14.1.4F5 Big-ip Domain Name System 15.1.0
3.5
CVSSv2
CVE-2022-28707
On F5 BIG-IP 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, and 14.1.x versions before 14.1.4.6, a stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility (also referred to as the BIG-IP TMUI) that allow...
F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Link Controller 14.1.0F5 Big-ip Policy Enforcement Manager 14.1.0F5 Big-ip Local Traffic Manager 14.1.0F5 Big-ip Analytics 14.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Domain Name System 14.1.0F5 Big-ip Global Traffic Manager 14.1.0F5 Big-ip Access Policy Manager 14.1.4F5 Big-ip Access Policy Manager 15.1.0F5 Big-ip Advanced Firewall Manager 14.1.4F5 Big-ip Advanced Firewall Manager 15.1.0F5 Big-ip Analytics 14.1.4F5 Big-ip Analytics 15.1.0F5 Big-ip Application Acceleration Manager 14.1.4F5 Big-ip Application Acceleration Manager 15.1.0F5 Big-ip Application Security Manager 14.1.4F5 Big-ip Application Security Manager 15.1.0F5 Big-ip Domain Name System 14.1.4F5 Big-ip Domain Name System 15.1.0
5
CVSSv2
CVE-2022-28691
On F5 BIG-IP 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5, 14.1.x versions before 14.1.4.6, and 13.1.x versions before 13.1.5, when a Real Time Streaming Protocol (RTSP) profile is configured on a virtual server, undisclosed traffic can cause an increase in Traf...
F5 Big-ip Local Traffic Manager 13.1.0F5 Big-ip Application Acceleration Manager 13.1.0F5 Big-ip Advanced Firewall Manager 13.1.0F5 Big-ip Analytics 13.1.0F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Application Security Manager 13.1.0F5 Big-ip Global Traffic Manager 13.1.0F5 Big-ip Link Controller 13.1.0F5 Big-ip Policy Enforcement Manager 13.1.0F5 Big-ip Domain Name System 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Advanced Firewall Manager 15.1.0F5 Big-ip Analytics 14.1.0F5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Application Acceleration Manager 15.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Domain Name System 14.1.0F5 Big-ip Domain Name System 15.1.0F5 Big-ip Fraud Protection Service 13.1.0F5 Big-ip Fraud Protection Service 14.1.0F5 Big-ip Fraud Protection Service 15.1.0
5
CVSSv2
CVE-2022-28705
On F5 BIG-IP 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, 14.1.x versions before 14.1.4.6, and 13.1.x versions before 13.1.5, on platforms with an ePVA and the pva.fwdaccel BigDB variable enabled, undisclosed requests to a virtual server with a FastL4 profile...
F5 Big-ip Local Traffic Manager 13.1.0F5 Big-ip Application Acceleration Manager 13.1.0F5 Big-ip Advanced Firewall Manager 13.1.0F5 Big-ip Analytics 13.1.0F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Application Security Manager 13.1.0F5 Big-ip Global Traffic Manager 13.1.0F5 Big-ip Link Controller 13.1.0F5 Big-ip Policy Enforcement Manager 13.1.0F5 Big-ip Domain Name System 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Advanced Firewall Manager 15.1.0F5 Big-ip Analytics 14.1.0F5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Application Acceleration Manager 15.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Domain Name System 14.1.0F5 Big-ip Domain Name System 15.1.0F5 Big-ip Fraud Protection Service 13.1.0F5 Big-ip Fraud Protection Service 14.1.0F5 Big-ip Fraud Protection Service 15.1.0
6
CVSSv2
CVE-2022-27878
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP, and F5 BIG-IP Guided Configuration (GC) all versions before 9.0, a stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an ...
F5 Big-ip Local Traffic Manager 13.1.0F5 Big-ip Application Acceleration Manager 13.1.0F5 Big-ip Advanced Firewall Manager 13.1.0F5 Big-ip Analytics 13.1.0F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Application Security Manager 13.1.0F5 Big-ip Global Traffic Manager 13.1.0F5 Big-ip Link Controller 13.1.0F5 Big-ip Policy Enforcement Manager 13.1.0F5 Big-ip Domain Name System 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Advanced Firewall Manager 15.1.0F5 Big-ip Analytics 14.1.0F5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Application Acceleration Manager 15.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Domain Name System 14.1.0F5 Big-ip Domain Name System 15.1.0F5 Big-ip Fraud Protection Service 13.1.0F5 Big-ip Fraud Protection Service 14.1.0F5 Big-ip Fraud Protection Service 15.1.0
5
CVSSv2
CVE-2022-29473
On F5 BIG-IP 15.1.x versions before 15.1.5.1, 14.1.x versions before 14.1.4.6, and 13.1.x versions before 13.1.5, when an IPSec ALG profile is configured on a virtual server, undisclosed responses can cause Traffic Management Microkernel(TMM) to terminate. Note: Software versions...
F5 Big-ip Local Traffic Manager 13.1.0F5 Big-ip Application Acceleration Manager 13.1.0F5 Big-ip Advanced Firewall Manager 13.1.0F5 Big-ip Analytics 13.1.0F5 Big-ip Access Policy Manager 13.1.0F5 Big-ip Application Security Manager 13.1.0F5 Big-ip Global Traffic Manager 13.1.0F5 Big-ip Link Controller 13.1.0F5 Big-ip Policy Enforcement Manager 13.1.0F5 Big-ip Domain Name System 13.1.0F5 Big-ip Access Policy Manager 14.1.0F5 Big-ip Advanced Firewall Manager 14.1.0F5 Big-ip Advanced Firewall Manager 15.1.0F5 Big-ip Analytics 14.1.0F5 Big-ip Application Acceleration Manager 14.1.0F5 Big-ip Application Acceleration Manager 15.1.0F5 Big-ip Application Security Manager 14.1.0F5 Big-ip Domain Name System 14.1.0F5 Big-ip Domain Name System 15.1.0F5 Big-ip Fraud Protection Service 13.1.0F5 Big-ip Fraud Protection Service 14.1.0F5 Big-ip Fraud Protection Service 15.1.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-21991CVE-2024-32674path traversalCVE-2023-21987denial of servicedosCVE-2024-4647CVE-2024-25519CVE-2024-33612
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook