VYPR

Big IP

by F5, Inc.

CVEs (626)

  • CVE-2022-35735Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, an authenticated attacker with Resource Administrator or Manager privileges can create or modify existing monitor objects in the Configuration utility in an…

  • CVE-2022-35728Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ version 8.x before 8.2.0 and all versions of 7.x, an authenticated user's iControl REST token may remain valid for a limited…

  • CVE-2022-35272Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.00

    In BIG-IP Versions 17.0.x before 17.0.0.1 and 16.1.x before 16.1.3.1, when source-port preserve-strict is configured on an HTTP Message Routing Framework (MRF) virtual server, undisclosed traffic may cause the Traffic Management Microkernel (TMM) to produce a core file and the…

  • CVE-2022-35245Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5.1, when a BIG-IP APM access policy is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which…

  • CVE-2022-35243Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.5.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, using an undisclosed…

  • CVE-2022-35240Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when the Message Routing (MR) Message Queuing Telemetry Transport (MQTT) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource…

  • CVE-2022-35236Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when an HTTP2 profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which have reached End of…

  • CVE-2022-34865Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.00

    In BIG-IP Versions 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, Traffic Intelligence feeds, which use HTTPS, do not verify the remote endpoint identity, allowing for potential data poisoning. Note: Software versions which have reached End of…

  • CVE-2022-34862Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when an LTM virtual server is configured to perform normalization, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note:…

  • CVE-2022-34851Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ Centralized Management all versions of 8.x, an authenticated attacker may cause iControl SOAP to become unavailable through…

  • CVE-2022-34844Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, and all versions of BIG-IQ 8.x, when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) driver is used with BIG-IP or BIG-IQ on Amazon Web Services (AWS) systems, undisclosed traffic can cause…

  • CVE-2022-34655Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when an iRule containing the HTTP::payload command is configured on a virtual server, undisclosed traffic can cause Traffic Management Microkernel (TMM) to terminate. Note: Software…

  • CVE-2022-34651Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, when an LTM Client or Server SSL profile with TLS 1.3 enabled is configured on a virtual server, along with an iRule that calls HTTP::respond, undisclosed requests can cause the Traffic Management Microkernel…

  • CVE-2022-33968Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.00

    In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, when an LTM monitor or APM SSO is configured on a virtual server, and NTLM challenge-response is in use, undisclosed traffic can cause a…

  • CVE-2022-33962Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.00

    In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, certain iRules commands may allow an attacker to bypass the access control restrictions for a self IP address, regardless of the port…

  • CVE-2022-33947Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, a vulnerability exists in undisclosed pages of the BIG-IP DNS Traffic Management User Interface (TMUI) that allows an authenticated attacker with at least operator…

  • CVE-2022-33203Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when a BIG-IP APM access policy with Service Connect agent is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software…

  • CVE-2022-32455Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.00

    In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when a BIG-IP LTM Client SSL profile is configured on a virtual server to perform client certificate authentication with session tickets enabled, undisclosed…

  • CVE-2022-31473Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.02

    In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated attacker may be able to bypass Appliance mode restrictions due to a directory traversal vulnerability in an undisclosed page within iApps. A successful exploit can…

  • CVE-2022-29491May 5, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    On F5 BIG-IP LTM, Advanced WAF, ASM, or APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a virtual server is configured with HTTP, TCP on one side (client/server), and…

Page 15 of 32