Published: 05/05/2022 Updated: 12/05/2022

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

On F5 BIG-IP 16.1.x versions before 16.1.2.2, 15.1.x versions before 15.1.5.1, 14.1.x versions before 14.1.4.6, 13.1.x versions before 13.1.5, and all versions of 12.1.x and 11.6.x, a directory traversal vulnerability exists in iControl SOAP that allows an authenticated attacker with at least guest role privileges to read wsdl files in the BIG-IP file system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Vulnerable Product	Search on Vulmon	Subscribe to Product
f5 big-ip local traffic manager 11.6.1
f5 big-ip local traffic manager 12.1.2
f5 big-ip advanced firewall manager 12.1.0
f5 big-ip access policy manager 12.1.2
f5 big-ip global traffic manager 11.6.1
f5 big-ip domain name system 12.1.2
f5 big-ip policy enforcement manager 12.1.1
f5 big-ip policy enforcement manager 12.1.2
f5 big-ip advanced firewall manager 12.1.2
f5 big-ip application security manager 12.1.1
f5 big-ip advanced firewall manager 12.1.1
f5 big-ip advanced firewall manager 11.6.1
f5 big-ip access policy manager 12.1.1
f5 big-ip access policy manager 12.1.0
f5 big-ip analytics 12.1.2
f5 big-ip analytics 12.1.0
f5 big-ip analytics 11.6.1
f5 big-ip application security manager 12.1.0
f5 big-ip application security manager 11.6.1
f5 big-ip application acceleration manager 12.1.2
f5 big-ip application acceleration manager 12.1.1
f5 big-ip application acceleration manager 12.1.0
f5 big-ip application acceleration manager 11.6.1
f5 big-ip policy enforcement manager 11.6.1
f5 big-ip local traffic manager 12.1.0
f5 big-ip link controller 12.1.2
f5 big-ip link controller 12.1.1
f5 big-ip link controller 12.1.0
f5 big-ip link controller 11.6.1
f5 big-ip domain name system 12.1.0
f5 big-ip advanced firewall manager 15.1.0
f5 big-ip advanced firewall manager 14.1.0
f5 big-ip advanced firewall manager 13.1.0
f5 big-ip access policy manager 14.1.0
f5 big-ip access policy manager 13.1.0
f5 big-ip access policy manager 11.6.1
f5 big-ip analytics 14.1.0
f5 big-ip analytics 13.1.0
f5 big-ip analytics 12.1.1
f5 big-ip application security manager 14.1.0
f5 big-ip application security manager 13.1.0
f5 big-ip application security manager 12.1.2
f5 big-ip application acceleration manager 15.1.0
f5 big-ip application acceleration manager 14.1.0
f5 big-ip application acceleration manager 13.1.0
f5 big-ip policy enforcement manager 15.1.0
f5 big-ip policy enforcement manager 14.1.0
f5 big-ip policy enforcement manager 13.1.0
f5 big-ip policy enforcement manager 12.1.3
f5 big-ip policy enforcement manager 12.1.0
f5 big-ip policy enforcement manager 11.6.2
f5 big-ip local traffic manager 15.1.0
f5 big-ip local traffic manager 14.1.0
f5 big-ip local traffic manager 13.1.0
f5 big-ip local traffic manager 12.1.1
f5 big-ip link controller 14.1.0
f5 big-ip link controller 13.1.0
f5 big-ip global traffic manager 14.1.0
f5 big-ip global traffic manager 13.1.0
f5 big-ip global traffic manager 12.1.2
f5 big-ip global traffic manager 12.1.1
f5 big-ip global traffic manager 12.1.0
f5 big-ip fraud protection service 14.1.0
f5 big-ip fraud protection service 13.1.0
f5 big-ip fraud protection service 12.1.0
f5 big-ip fraud protection service 11.6.1
f5 big-ip domain name system 14.1.0
f5 big-ip domain name system 13.1.0
f5 big-ip domain name system 12.1.1
f5 big-ip domain name system 11.6.1
f5 big-ip advanced firewall manager 17.0.0
f5 big-ip advanced firewall manager 16.1.2
f5 big-ip advanced firewall manager 16.1.1
f5 big-ip advanced firewall manager 16.1.0
f5 big-ip advanced firewall manager 15.1.5
f5 big-ip advanced firewall manager 15.1.4
f5 big-ip advanced firewall manager 15.1.3
f5 big-ip advanced firewall manager 15.1.2
f5 big-ip advanced firewall manager 15.1.1
f5 big-ip advanced firewall manager 14.1.4
f5 big-ip advanced firewall manager 14.1.3
f5 big-ip advanced firewall manager 14.1.2
f5 big-ip advanced firewall manager 13.1.5
f5 big-ip advanced firewall manager 13.1.4
f5 big-ip advanced firewall manager 13.1.3
f5 big-ip advanced firewall manager 13.1.1
f5 big-ip advanced firewall manager 12.1.6
f5 big-ip advanced firewall manager 12.1.5
f5 big-ip advanced firewall manager 12.1.4
f5 big-ip advanced firewall manager 12.1.3
f5 big-ip advanced firewall manager 11.6.5
f5 big-ip advanced firewall manager 11.6.4
f5 big-ip advanced firewall manager 11.6.3
f5 big-ip advanced firewall manager 11.6.2
f5 big-ip access policy manager 17.0.0
f5 big-ip access policy manager 16.1.2
f5 big-ip access policy manager 16.1.1
f5 big-ip access policy manager 16.1.0
f5 big-ip access policy manager 15.1.5
f5 big-ip access policy manager 15.1.4
f5 big-ip access policy manager 15.1.3
f5 big-ip access policy manager 15.1.2
f5 big-ip access policy manager 15.1.1
f5 big-ip access policy manager 15.1.0
f5 big-ip access policy manager 14.1.4
f5 big-ip access policy manager 14.1.3
f5 big-ip access policy manager 14.1.2
f5 big-ip access policy manager 13.1.5
f5 big-ip access policy manager 13.1.4
f5 big-ip access policy manager 13.1.3
f5 big-ip access policy manager 13.1.1
f5 big-ip access policy manager 12.1.6
f5 big-ip access policy manager 12.1.5
f5 big-ip access policy manager 12.1.4
f5 big-ip access policy manager 12.1.3
f5 big-ip access policy manager 11.6.5
f5 big-ip access policy manager 11.6.4
f5 big-ip access policy manager 11.6.3
f5 big-ip access policy manager 11.6.2
f5 big-ip analytics 17.0.0
f5 big-ip analytics 16.1.2
f5 big-ip analytics 16.1.1
f5 big-ip analytics 16.1.0
f5 big-ip analytics 15.1.5
f5 big-ip analytics 15.1.4
f5 big-ip analytics 15.1.3
f5 big-ip analytics 15.1.2
f5 big-ip analytics 15.1.0
f5 big-ip analytics 14.1.4
f5 big-ip application security manager 16.1.0
f5 big-ip application security manager 15.1.0
f5 big-ip application security manager 14.1.4
f5 big-ip application acceleration manager 16.1.0
f5 big-ip application acceleration manager 14.1.4
f5 big-ip policy enforcement manager 16.1.0
f5 big-ip policy enforcement manager 14.1.4
f5 big-ip local traffic manager 16.1.0
f5 big-ip local traffic manager 14.1.4
f5 big-ip link controller 16.1.0
f5 big-ip link controller 15.1.0
f5 big-ip link controller 14.1.4
f5 big-ip global traffic manager 16.1.0
f5 big-ip global traffic manager 15.1.0
f5 big-ip global traffic manager 14.1.4
f5 big-ip fraud protection service 16.1.0
f5 big-ip fraud protection service 15.1.0
f5 big-ip fraud protection service 14.1.4
f5 big-ip domain name system 16.1.0
f5 big-ip domain name system 15.1.0
f5 big-ip domain name system 14.1.4
f5 big-ip analytics 15.1.1
f5 big-ip analytics 14.1.3
f5 big-ip analytics 14.1.2
f5 big-ip analytics 13.1.5
f5 big-ip analytics 13.1.4
f5 big-ip analytics 13.1.3
f5 big-ip analytics 13.1.1
f5 big-ip analytics 12.1.6
f5 big-ip analytics 12.1.5
f5 big-ip analytics 12.1.4
f5 big-ip analytics 12.1.3
f5 big-ip analytics 11.6.5
f5 big-ip analytics 11.6.4
f5 big-ip analytics 11.6.3
f5 big-ip analytics 11.6.2
f5 big-ip application security manager 17.0.0
f5 big-ip application security manager 16.1.2
f5 big-ip application security manager 16.1.1
f5 big-ip application security manager 15.1.5
f5 big-ip application security manager 15.1.4
f5 big-ip application security manager 15.1.3
f5 big-ip application security manager 15.1.2
f5 big-ip application security manager 15.1.1
f5 big-ip application security manager 14.1.3
f5 big-ip application security manager 14.1.2
f5 big-ip application security manager 13.1.5
f5 big-ip application security manager 13.1.4
f5 big-ip application security manager 13.1.3
f5 big-ip application security manager 13.1.1
f5 big-ip application security manager 12.1.6
f5 big-ip application security manager 12.1.5
f5 big-ip application security manager 12.1.4
f5 big-ip application security manager 12.1.3
f5 big-ip application security manager 11.6.5
f5 big-ip application security manager 11.6.4
f5 big-ip application security manager 11.6.3
f5 big-ip application security manager 11.6.2
f5 big-ip application acceleration manager 17.0.0
f5 big-ip application acceleration manager 16.1.2
f5 big-ip application acceleration manager 16.1.1
f5 big-ip application acceleration manager 15.1.5
f5 big-ip application acceleration manager 15.1.4
f5 big-ip application acceleration manager 15.1.3
f5 big-ip application acceleration manager 15.1.2
f5 big-ip application acceleration manager 15.1.1
f5 big-ip application acceleration manager 14.1.3
f5 big-ip application acceleration manager 14.1.2
f5 big-ip application acceleration manager 13.1.5
f5 big-ip application acceleration manager 13.1.4
f5 big-ip application acceleration manager 13.1.3
f5 big-ip application acceleration manager 13.1.1
f5 big-ip application acceleration manager 12.1.6
f5 big-ip application acceleration manager 12.1.5
f5 big-ip application acceleration manager 12.1.4
f5 big-ip application acceleration manager 12.1.3
f5 big-ip application acceleration manager 11.6.5
f5 big-ip application acceleration manager 11.6.4
f5 big-ip application acceleration manager 11.6.3
f5 big-ip application acceleration manager 11.6.2
f5 big-ip policy enforcement manager 17.0.0
f5 big-ip policy enforcement manager 16.1.2
f5 big-ip policy enforcement manager 16.1.1
f5 big-ip policy enforcement manager 15.1.5
f5 big-ip policy enforcement manager 15.1.4
f5 big-ip policy enforcement manager 15.1.3
f5 big-ip policy enforcement manager 15.1.2
f5 big-ip policy enforcement manager 15.1.1
f5 big-ip policy enforcement manager 14.1.3
f5 big-ip policy enforcement manager 14.1.2
f5 big-ip policy enforcement manager 13.1.5
f5 big-ip policy enforcement manager 13.1.4
f5 big-ip policy enforcement manager 13.1.3
f5 big-ip policy enforcement manager 13.1.1
f5 big-ip policy enforcement manager 12.1.6
f5 big-ip policy enforcement manager 12.1.5
f5 big-ip policy enforcement manager 12.1.4
f5 big-ip policy enforcement manager 11.6.5
f5 big-ip policy enforcement manager 11.6.4
f5 big-ip policy enforcement manager 11.6.3
f5 big-ip local traffic manager 17.0.0
f5 big-ip local traffic manager 16.1.2
f5 big-ip local traffic manager 16.1.1
f5 big-ip local traffic manager 15.1.5
f5 big-ip local traffic manager 15.1.4
f5 big-ip local traffic manager 15.1.3
f5 big-ip local traffic manager 15.1.2
f5 big-ip local traffic manager 15.1.1
f5 big-ip local traffic manager 14.1.3
f5 big-ip local traffic manager 14.1.2
f5 big-ip local traffic manager 13.1.5
f5 big-ip local traffic manager 13.1.4
f5 big-ip local traffic manager 13.1.3
f5 big-ip local traffic manager 13.1.1
f5 big-ip local traffic manager 12.1.6
f5 big-ip local traffic manager 12.1.5
f5 big-ip local traffic manager 12.1.4
f5 big-ip local traffic manager 12.1.3
f5 big-ip local traffic manager 11.6.5
f5 big-ip local traffic manager 11.6.4
f5 big-ip local traffic manager 11.6.3
f5 big-ip local traffic manager 11.6.2
f5 big-ip link controller 17.0.0
f5 big-ip link controller 16.1.2
f5 big-ip link controller 16.1.1
f5 big-ip link controller 15.1.5
f5 big-ip link controller 15.1.4
f5 big-ip link controller 15.1.3
f5 big-ip link controller 15.1.2
f5 big-ip link controller 15.1.1
f5 big-ip link controller 14.1.3
f5 big-ip link controller 14.1.2
f5 big-ip link controller 13.1.5
f5 big-ip link controller 13.1.4
f5 big-ip link controller 13.1.3
f5 big-ip link controller 13.1.1
f5 big-ip link controller 12.1.6
f5 big-ip link controller 12.1.5
f5 big-ip link controller 12.1.4
f5 big-ip link controller 12.1.3
f5 big-ip link controller 11.6.5
f5 big-ip link controller 11.6.4
f5 big-ip link controller 11.6.3
f5 big-ip link controller 11.6.2
f5 big-ip global traffic manager 17.0.0
f5 big-ip global traffic manager 16.1.2
f5 big-ip global traffic manager 16.1.1
f5 big-ip global traffic manager 15.1.5
f5 big-ip global traffic manager 15.1.4
f5 big-ip global traffic manager 15.1.3
f5 big-ip global traffic manager 15.1.2
f5 big-ip global traffic manager 15.1.1
f5 big-ip global traffic manager 14.1.3
f5 big-ip global traffic manager 14.1.2
f5 big-ip global traffic manager 13.1.5
f5 big-ip global traffic manager 13.1.4
f5 big-ip global traffic manager 13.1.3
f5 big-ip global traffic manager 13.1.1
f5 big-ip global traffic manager 12.1.6
f5 big-ip global traffic manager 12.1.5
f5 big-ip global traffic manager 12.1.4
f5 big-ip global traffic manager 12.1.3
f5 big-ip global traffic manager 11.6.5
f5 big-ip global traffic manager 11.6.4
f5 big-ip global traffic manager 11.6.3
f5 big-ip global traffic manager 11.6.2
f5 big-ip fraud protection service 17.0.0
f5 big-ip fraud protection service 16.1.2
f5 big-ip fraud protection service 16.1.1
f5 big-ip fraud protection service 15.1.5
f5 big-ip fraud protection service 15.1.4
f5 big-ip fraud protection service 15.1.3
f5 big-ip fraud protection service 15.1.2
f5 big-ip fraud protection service 15.1.1
f5 big-ip fraud protection service 14.1.3
f5 big-ip fraud protection service 14.1.2
f5 big-ip fraud protection service 13.1.5
f5 big-ip fraud protection service 13.1.4
f5 big-ip fraud protection service 13.1.3
f5 big-ip fraud protection service 13.1.1
f5 big-ip fraud protection service 12.1.6
f5 big-ip fraud protection service 12.1.5
f5 big-ip fraud protection service 12.1.4
f5 big-ip fraud protection service 12.1.3
f5 big-ip fraud protection service 12.1.2
f5 big-ip fraud protection service 12.1.1
f5 big-ip fraud protection service 11.6.5
f5 big-ip fraud protection service 11.6.4
f5 big-ip fraud protection service 11.6.3
f5 big-ip fraud protection service 11.6.2
f5 big-ip domain name system 17.0.0
f5 big-ip domain name system 16.1.2
f5 big-ip domain name system 16.1.1
f5 big-ip domain name system 15.1.5
f5 big-ip domain name system 15.1.4
f5 big-ip domain name system 15.1.3
f5 big-ip domain name system 15.1.2
f5 big-ip domain name system 15.1.1
f5 big-ip domain name system 14.1.3
f5 big-ip domain name system 14.1.2
f5 big-ip domain name system 13.1.5
f5 big-ip domain name system 13.1.4
f5 big-ip domain name system 13.1.3
f5 big-ip domain name system 13.1.1
f5 big-ip domain name system 12.1.6
f5 big-ip domain name system 12.1.5
f5 big-ip domain name system 12.1.4
f5 big-ip domain name system 12.1.3
f5 big-ip domain name system 11.6.5
f5 big-ip domain name system 11.6.4
f5 big-ip domain name system 11.6.3
f5 big-ip domain name system 11.6.2

CWE-22 https://support.f5.com/csp/article/K59904248 https://nvd.nist.gov

Get Started

CVE-2022-29474

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect