VYPR

Big IP

by F5, Inc.

CVEs (593)

  • CVE-2023-40542HigOct 10, 2023
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    When TCP Verified Accept is enabled on a TCP profile that is configured on a Virtual Server, undisclosed requests can cause an increase in memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

  • CVE-2023-40534HigOct 10, 2023
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    When a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, and an iRule using the HTTP_REQUEST event or Local Traffic Policy are associated with the virtual server, undisclosed requests can cause TMM to terminate.  Note: Software versions…

  • CVE-2023-38138HigAug 2, 2023
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.00

    A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which allows an attacker to run JavaScript in the context of the currently logged-in user.  Note: Software versions which have reached End of Technical…

  • CVE-2023-29163HigMay 3, 2023
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  • CVE-2023-27378HigMay 3, 2023
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.00

    Multiple reflected cross-site scripting (XSS) vulnerabilities exist in undisclosed pages of the BIG-IP Configuration utility which allow an attacker to run JavaScript in the context of the currently logged-in user.  Note: Software versions which have reached End of Technical…

  • CVE-2023-23552HigFeb 1, 2023
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.02

    On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.0 before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a BIG-IP Advanced WAF or BIG-IP ASM security policy is configured on a virtual server, undisclosed requests can cause an increase in memory…

  • CVE-2023-22842HigFeb 1, 2023
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. …

  • CVE-2023-22839HigFeb 1, 2023
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all version of 13.1.x, when a DNS profile with the Rapid Response Mode setting enabled is configured on a virtual server with hardware SYN cookies enabled,…

  • CVE-2023-22664HigFeb 1, 2023
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, and BIG-IP SPK starting in version 1.6.0, when a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, undisclosed requests can cause an increase in memory resource…

  • CVE-2023-22422HigFeb 1, 2023
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, when a HTTP profile with the non-default Enforcement options of Enforce HTTP Compliance and Unknown Methods: Reject are configured on a virtual server, undisclosed requests can cause the Traffic Management…

  • CVE-2023-22341HigFeb 1, 2023
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On version 14.1.x before 14.1.5.3, and all versions of 13.1.x, when the BIG-IP APM system is configured with all the following elements, undisclosed requests may cause the Traffic Management Microkernel (TMM) to terminate: * An OAuth Server that references an OAuth Provider …

  • CVE-2023-22340HigFeb 1, 2023
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have…

  • CVE-2023-22323HigFeb 1, 2023
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    In BIP-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when OCSP authentication profile is configured on a virtual server, undisclosed requests can cause an increase in CPU resource…

  • CVE-2023-22281HigFeb 1, 2023
    F5, Inc.
    BIG-IP AFM
    risk 0.49cvss 7.5epss 0.01

    On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a BIG-IP AFM NAT policy with a destination NAT rule is configured on a FastL4 virtual server, undisclosed traffic can cause the Traffic…

  • CVE-2022-41833HigOct 19, 2022
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    In all BIG-IP 13.1.x versions, when an iRule containing the HTTP::collect command is configured on a virtual server, undisclosed requests can cause Traffic Management Microkernel (TMM) to terminate.

  • CVE-2022-41832HigOct 19, 2022
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when a SIP profile is configured on a virtual server, undisclosed messages can cause an increase in memory resource utilization.

  • CVE-2022-41787HigOct 19, 2022
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS queries with DNSSEC can cause TMM to…

  • CVE-2022-41624HigOct 19, 2022
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.2, 15.1.x before 15.1.7, 14.1.x before 14.1.5.2, and 13.1.x before 13.1.5.1, when a sideband iRule is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization.

  • CVE-2022-35272HigAug 4, 2022
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.00

    In BIG-IP Versions 17.0.x before 17.0.0.1 and 16.1.x before 16.1.3.1, when source-port preserve-strict is configured on an HTTP Message Routing Framework (MRF) virtual server, undisclosed traffic may cause the Traffic Management Microkernel (TMM) to produce a core file and the…

  • CVE-2022-35245HigAug 4, 2022
    F5, Inc.
    Big IP
    risk 0.49cvss 7.5epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5.1, when a BIG-IP APM access policy is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which…

Page 8 of 30