Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
f5 big-ip next service proxy for kubernetes vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2023-45886
The BGP daemon (bgpd) in IP Infusion ZebOS up to and including 7.10.6 allow remote malicious users to cause a denial of service by sending crafted BGP update messages containing a malformed attribute.
F5 Big-ip Next 20.0.1
F5 Big-ip Next Service Proxy For Kubernetes
F5 Big-ip Next Cloud-native Network Functions
F5 Big-ip Local Traffic Manager
F5 Big-ip Global Traffic Manager
Ipinfusion Zebos
7.5
CVSSv3
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Ietf Http 2.0
Nghttp2 Nghttp2
Netty Netty
Envoyproxy Envoy 1.27.0
Envoyproxy Envoy 1.26.4
Envoyproxy Envoy 1.25.9
Envoyproxy Envoy 1.24.10
Eclipse Jetty
Caddyserver Caddy
Golang Http2
Golang Go
Golang Networking
F5 Big-ip Analytics
F5 Big-ip Policy Enforcement Manager
F5 Big-ip Local Traffic Manager
F5 Big-ip Link Controller
F5 Big-ip Global Traffic Manager
F5 Big-ip Fraud Protection Service
F5 Big-ip Domain Name System
F5 Big-ip Application Security Manager
F5 Big-ip Application Acceleration Manager
F5 Big-ip Advanced Firewall Manager
35 Github repositories
2 Articles
7.5
CVSSv3
CVE-2023-40534
When a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, and an iRule using the HTTP_REQUEST event or Local Traffic Policy are associated with the virtual server, undisclosed requests can cause TMM to terminate. Note: Software versions wh...
F5 Big-ip Access Policy Manager 17.1.0
F5 Big-ip Access Policy Manager
F5 Big-ip Advanced Firewall Manager
F5 Big-ip Application Security Manager
F5 Big-ip Domain Name System
F5 Big-ip Local Traffic Manager
F5 Big-ip Advanced Firewall Manager 17.1.0
F5 Big-ip Advanced Web Application Firewall 17.1.0
F5 Big-ip Analytics 17.1.0
F5 Big-ip Application Acceleration Manager 17.1.0
F5 Big-ip Application Security Manager 17.1.0
F5 Big-ip Application Visibility And Reporting 17.1.0
F5 Big-ip Carrier-grade Nat 17.1.0
F5 Big-ip Ddos Hybrid Defender 17.1.0
F5 Big-ip Domain Name System 17.1.0
F5 Big-ip Edge Gateway 17.1.0
F5 Big-ip Fraud Protection Service 17.1.0
F5 Big-ip Global Traffic Manager 17.1.0
F5 Big-ip Link Controller 17.1.0
F5 Big-ip Local Traffic Manager 17.1.0
F5 Big-ip Policy Enforcement Manager 17.1.0
F5 Big-ip Ssl Orchestrator 17.1.0
7.4
CVSSv3
CVE-2023-45226
The BIG-IP SPK TMM (Traffic Management Module) f5-debug-sidecar and f5-debug-sshd containers contains hardcoded credentials that may allow an attacker with the ability to intercept traffic to impersonate the SPK Secure Shell (SSH) server on those containers. This is only exposed...
F5 Big-ip Next Service Proxy For Kubernetes 1.5.0
5.3
CVSSv3
CVE-2023-24594
When an SSL profile is configured on a Virtual Server, undisclosed traffic can cause an increase in CPU or SSL accelerator resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
F5 Big-ip Advanced Firewall Manager 16.1.2
F5 Big-ip Access Policy Manager 16.1.2
F5 Big-ip Analytics 16.1.2
F5 Big-ip Application Security Manager 16.1.2
F5 Big-ip Application Acceleration Manager 16.1.2
F5 Big-ip Policy Enforcement Manager 16.1.2
F5 Big-ip Local Traffic Manager 16.1.2
F5 Big-ip Link Controller 16.1.2
F5 Big-ip Global Traffic Manager 16.1.2
F5 Big-ip Fraud Protection Service 16.1.2
F5 Big-ip Domain Name System 16.1.2
F5 Big-ip Advanced Web Application Firewall 16.1.2
F5 Big-ip Application Visibility And Reporting 16.1.2
F5 Big-ip Carrier-grade Nat 16.1.2
F5 Big-ip Ddos Hybrid Defender 16.1.2
F5 Big-ip Edge Gateway 16.1.2
F5 Big-ip Ssl Orchestrator 16.1.2
F5 Big-ip Webaccelerator 16.1.2
F5 Big-ip Websafe 16.1.2
F5 Big-ip Access Policy Manager 15.1.4.1
F5 Big-ip Advanced Firewall Manager 15.1.4.1
F5 Big-ip Advanced Web Application Firewall 15.1.4.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
type confusion
IMAP
CVE-2024-36103
CVE-2024-28995
CVE-2024-37325
CVE-2024-30078
CVE-2024-30082
SQL injection
CVE-2024-30052
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started