VYPR
← F5, Inc.

Vendor CVEs

F5, Inc.

All CVEs

761 total · sorted by risk
  • CVE-2023-22340Feb 1, 2023
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have…

  • CVE-2023-22326Feb 1, 2023
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, and all versions of BIG-IQ 8.x and 7.1.x, incorrect permission assignment vulnerabilities exist in the iControl REST and TMOS shell…

  • CVE-2023-22323Feb 1, 2023
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIP-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when OCSP authentication profile is configured on a virtual server, undisclosed requests can cause an increase in CPU resource…

  • CVE-2023-22302Feb 1, 2023
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP versions 17.0.x before 17.0.0.2, and 16.1.x beginning in 16.1.2.2 to before 16.1.3.3, when an HTTP profile is configured on a virtual server and conditions beyond the attacker’s control exist on the target pool member, undisclosed requests sent to the BIG-IP system…

  • CVE-2023-22283Feb 1, 2023
    F5, Inc.
    Edge Client For Windows
    risk 0.00cvss —epss 0.00

    On versions beginning in 7.1.5 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client for Windows. User interaction and administrative privileges are required to exploit this vulnerability because the victim user needs to run the executable on the…

  • CVE-2023-22281Feb 1, 2023
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a BIG-IP AFM NAT policy with a destination NAT rule is configured on a FastL4 virtual server, undisclosed traffic can cause the Traffic…

  • CVE-2022-41983Oct 19, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.00

    On specific hardware platforms, on BIG-IP versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all versions of 13.1.x, while Intel QAT (QuickAssist Technology) and the AES-GCM/CCM cipher is in use, undisclosed conditions can cause BIG-IP to send…

  • CVE-2022-41835Oct 19, 2022
    F5, Inc.
    F5os A
    risk 0.00cvss —epss 0.00

    In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.5.0, excessive file permissions in F5OS allows an authenticated local attacker to execute limited set of commands in a container and impact the F5OS controller.

  • CVE-2022-41833Oct 19, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In all BIG-IP 13.1.x versions, when an iRule containing the HTTP::collect command is configured on a virtual server, undisclosed requests can cause Traffic Management Microkernel (TMM) to terminate.

  • CVE-2022-41832Oct 19, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when a SIP profile is configured on a virtual server, undisclosed messages can cause an increase in memory resource utilization.

  • CVE-2022-41813Oct 19, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when BIG-IP is provisioned with PEM or AFM module, an undisclosed input can cause Traffic Management Microkernel (TMM) to terminate.

  • CVE-2022-41806Oct 19, 2022
    F5, Inc.
    Big Ip (afm)
    risk 0.00cvss —epss 0.01

    In versions 16.1.x before 16.1.3.2 and 15.1.x before 15.1.5.1, when BIG-IP AFM Network Address Translation policy with IPv6/IPv4 translation rules is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.

  • CVE-2022-41787Oct 19, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, when DNS profile is configured on a virtual server with DNS Express enabled, undisclosed DNS queries with DNSSEC can cause TMM to…

  • CVE-2022-41780Oct 19, 2022
    F5, Inc.
    F5os A
    risk 0.00cvss —epss 0.01

    In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.4.0, a directory traversal vulnerability exists in an undisclosed location of the F5OS CLI that allows an attacker to read arbitrary files.

  • CVE-2022-41770Oct 19, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ all versions of 8.x and 7.x, an authenticated iControl REST user can cause an increase in memory resource utilization, via…

  • CVE-2022-41743Oct 19, 2022
    F5, Inc.
    Nginx Plus
    risk 0.00cvss —epss 0.00

    NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_hls_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its crash or potential other impact using a specially crafted audio or video file. The issue affects…

  • CVE-2022-41742Oct 19, 2022
    Nginx
    Nginx
    risk 0.00cvss —epss 0.01

    NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to cause a worker…

  • CVE-2022-41741Oct 19, 2022
    F5, Inc.
    Nginx Plus
    risk 0.00cvss —epss 0.01

    NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to corrupt NGINX worker…

  • CVE-2022-41694Oct 19, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, and BIG-IQ versions 8.x before 8.2.0.1 and all versions of 7.x, when an SSL key is imported on a BIG-IP or BIG-IQ system, undisclosed input can cause MCPD to…

  • CVE-2022-41691Oct 19, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    When a BIG-IP Advanced WAF/ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.

  • CVE-2022-41624Oct 19, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.2, 15.1.x before 15.1.7, 14.1.x before 14.1.5.2, and 13.1.x before 13.1.5.1, when a sideband iRule is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization.

  • CVE-2022-41617Oct 19, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, When the Advanced WAF / ASM module is provisioned, an authenticated remote code execution vulnerability exists in the BIG-IP iControl REST interface.

  • CVE-2022-36795Oct 19, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, and 14.1.x before 14.1.5.1, when an LTM TCP profile with Auto Receive Window Enabled is configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing…

  • CVE-2022-35735Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, an authenticated attacker with Resource Administrator or Manager privileges can create or modify existing monitor objects in the Configuration utility in an…

  • CVE-2022-35728Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ version 8.x before 8.2.0 and all versions of 7.x, an authenticated user's iControl REST token may remain valid for a limited…

  • CVE-2022-35272Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.00

    In BIG-IP Versions 17.0.x before 17.0.0.1 and 16.1.x before 16.1.3.1, when source-port preserve-strict is configured on an HTTP Message Routing Framework (MRF) virtual server, undisclosed traffic may cause the Traffic Management Microkernel (TMM) to produce a core file and the…

  • CVE-2022-35245Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5.1, when a BIG-IP APM access policy is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which…

  • CVE-2022-35243Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.5.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, using an undisclosed…

  • CVE-2022-35241Aug 4, 2022
    F5, Inc.
    Nginx Instance Manager
    risk 0.00cvss —epss 0.01

    In versions 2.x before 2.3.1 and all versions of 1.x, when NGINX Instance Manager is in use, undisclosed requests can cause an increase in disk resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  • CVE-2022-35240Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when the Message Routing (MR) Message Queuing Telemetry Transport (MQTT) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource…

  • CVE-2022-35236Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when an HTTP2 profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which have reached End of…

  • CVE-2022-34865Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.00

    In BIG-IP Versions 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, Traffic Intelligence feeds, which use HTTPS, do not verify the remote endpoint identity, allowing for potential data poisoning. Note: Software versions which have reached End of…

  • CVE-2022-34862Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when an LTM virtual server is configured to perform normalization, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note:…

  • CVE-2022-34851Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ Centralized Management all versions of 8.x, an authenticated attacker may cause iControl SOAP to become unavailable through…

  • CVE-2022-34844Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, and all versions of BIG-IQ 8.x, when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) driver is used with BIG-IP or BIG-IQ on Amazon Web Services (AWS) systems, undisclosed traffic can cause…

  • CVE-2022-34655Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when an iRule containing the HTTP::payload command is configured on a virtual server, undisclosed traffic can cause Traffic Management Microkernel (TMM) to terminate. Note: Software…

  • CVE-2022-34651Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, when an LTM Client or Server SSL profile with TLS 1.3 enabled is configured on a virtual server, along with an iRule that calls HTTP::respond, undisclosed requests can cause the Traffic Management Microkernel…

  • CVE-2022-33968Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.00

    In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, when an LTM monitor or APM SSO is configured on a virtual server, and NTLM challenge-response is in use, undisclosed traffic can cause a…

  • CVE-2022-33962Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.00

    In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, certain iRules commands may allow an attacker to bypass the access control restrictions for a self IP address, regardless of the port…

  • CVE-2022-33947Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, a vulnerability exists in undisclosed pages of the BIG-IP DNS Traffic Management User Interface (TMUI) that allows an authenticated attacker with at least operator…

  • CVE-2022-33203Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when a BIG-IP APM access policy with Service Connect agent is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software…

  • CVE-2022-32455Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.00

    In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, when a BIG-IP LTM Client SSL profile is configured on a virtual server to perform client certificate authentication with session tickets enabled, undisclosed…

  • CVE-2022-31473Aug 4, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.02

    In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated attacker may be able to bypass Appliance mode restrictions due to a directory traversal vulnerability in an undisclosed page within iApps. A successful exploit can…

  • CVE-2022-29491May 5, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    On F5 BIG-IP LTM, Advanced WAF, ASM, or APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a virtual server is configured with HTTP, TCP on one side (client/server), and…

  • CVE-2022-29480May 5, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    On F5 BIG-IP 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when multiple route domains are configured, undisclosed requests to big3d can cause an increase in CPU resource utilization. Note: Software versions which have reached End of Technical Support…

  • CVE-2022-29479May 5, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Management all versions of 8.x and 7.x, when an IPv6 self IP address is configured and the…

  • CVE-2022-29474May 5, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a directory traversal vulnerability exists in iControl SOAP that allows an authenticated…

  • CVE-2022-29473May 5, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when an IPSec ALG profile is configured on a virtual server, undisclosed responses can cause Traffic Management Microkernel(TMM) to terminate. Note: Software…

  • CVE-2022-29263May 5, 2022
    F5, Inc.
    Apm Clients
    risk 0.00cvss —epss 0.00

    On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, the BIG-IP Edge…

  • CVE-2022-28859May 5, 2022
    F5, Inc.
    Big IP
    risk 0.00cvss —epss 0.01

    On F5 BIG-IP 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6, when installing Net HSM, the scripts (nethsm-safenet-install.sh and nethsm-thales-install.sh) expose the Net HSM partition password. Note: Software versions which have reached End of Technical…

Page 8 of 16