f5

1,024 tracked vulnerabilities.

CVE-2023-29240 MEDIUM
F5 BIG-IQ Centralized Management 8.0.0-8.2.0 - Authenticated Arbitrary File Upload via iControl REST Endpoint
May 03, 2023
CVSS 5.4
EPSS 0.01
CVE-2023-29163 HIGH
F5 BIG-IP 14.1.0-14.1.5.3 - Denial of Service via UDP Profile Idle Timeout
May 03, 2023
CVSS 7.5
EPSS 0.01
CVE-2023-28742 HIGH
F5 BIG-IP DNS 13.1.0-13.1.4 - Authenticated Remote Command Execution via DNS iQuery Mesh
May 03, 2023
CVSS 7.2
EPSS 0.03
CVE-2023-28724 HIGH
NGINX Management Suite - Privilege Escalation
May 03, 2023
CVSS 7.1
EPSS 0.00
CVE-2023-28656 HIGH
NGINX Management Suite - Privilege Escalation
May 03, 2023
CVSS 8.1
EPSS 0.00
CVE-2023-28406 MEDIUM
BIG-IP 13.1.0-13.1.5 - Authenticated Path Traversal in Configuration Utility
May 03, 2023
CVSS 4.3
EPSS 0.01
CVE-2023-27378 HIGH
F5 BIG-IP 13.1.0-13.1.5 - Reflected Cross-Site Scripting in Configuration Utility
May 03, 2023
CVSS 7.5
EPSS 0.01
CVE-2023-24594 MEDIUM
F5 F5 BIG-IP - Resource Consumption via SSL Traffic
May 03, 2023
CVSS 5.3
EPSS 0.01
CVE-2023-24461 HIGH
BIG-IP Edge Client - Improper Certificate Validation
May 03, 2023
CVSS 7.4
EPSS 0.00
CVE-2023-22372 MEDIUM
BIG-IP Edge Client - Improper Enforcement
May 03, 2023
CVSS 5.9
EPSS 0.00
CVE-2023-27730 HIGH
Nginx NJS v0.7.10 - Out-of-bounds Read via njs_lvlhsh_find Function
Apr 09, 2023
CVSS 7.5
EPSS 0.00
CVE-2023-27729 HIGH
Nginx NJS v0.7.10 - Buffer Overflow via njs_vmcode_return Function
Apr 09, 2023
CVSS 7.5
EPSS 0.00
CVE-2023-27728 HIGH
Nginx NJS v0.7.10 - Out-of-bounds Read via njs_dump_is_recursive Function
Apr 09, 2023
CVSS 7.5
EPSS 0.00
CVE-2023-27727 HIGH
Nginx NJS v0.7.10 - Out-of-bounds Read via njs_function_frame
Apr 09, 2023
CVSS 7.5
EPSS 0.00
CVE-2023-1550 MEDIUM
NGINX Agent <2.23.3 - Info Disclosure
Mar 29, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-23555 HIGH
BIG-IP Virtual Edition <15.1.8 - DoS
Feb 01, 2023
CVSS 7.5
EPSS 0.01
CVE-2023-23552 HIGH
F5 BIG-IP Advanced WAF and ASM 13.1.x-16.1.x - Uncontrolled Resource Consumption
Feb 01, 2023
CVSS 7.5
EPSS 0.63
CVE-2023-22842 HIGH
F5 BIG-IP 13.1.0-13.1.4 - Denial of Service via SIP Profile Traffic
Feb 01, 2023
CVSS 7.5
EPSS 0.01
CVE-2023-22839 HIGH
BIG-IP DNS 13.1.0-13.1.4, 14.1.0-14.1.5.2, 15.1.0-15.1.8, 16.1.0-16.1.3.2, 17.0.0-17.0.0.1 DoS via Rapid Response Mode
Feb 01, 2023
CVSS 7.5
EPSS 0.01
CVE-2023-22664 HIGH
BIG-IP 16.1.0-16.1.3.2 and 17.0.0-17.0.0.1 - Uncontrolled Resource Consumption via HTTP/2 Profile
Feb 01, 2023
CVSS 7.5
EPSS 0.01
CVE-2023-22657 HIGH
F5OS-A 1.2.0-1.2.9 and F5OS-C 1.3.0-1.4.9 - OS Command Injection via Tenant File Name Processing
Feb 01, 2023
CVSS 7.0
EPSS 0.00
CVE-2023-22422 HIGH
BIG-IP 16.1.0-16.1.3.2 and 17.0.0-17.0.0.1 - Denial of Service via HTTP Compliance Enforcement
Feb 01, 2023
CVSS 7.5
EPSS 0.01
CVE-2023-22418 MEDIUM
BIG-IP APM 13.1.0-13.1.5, 14.1.0-14.1.5.3, 15.1.0-15.1.7, 16.1.0-16.1.3.3, 17.0.0-17.0.0.2 Open Redirect
Feb 01, 2023
CVSS 6.1
EPSS 0.00
CVE-2023-22374 HIGH
F5 BIG-IP Access Policy Manager 14.1.4.6-14.1.5 - Authenticated Format String Injection via iControl SOAP
Feb 01, 2023
CVSS 8.5
EPSS 0.03
CVE-2023-22358 HIGH
BIG-IP Edge Client <7.2.3.1 - DLL Hijacking
Feb 01, 2023
CVSS 7.8
EPSS 0.00
Products
big-ip_access_policy_manager 589 big-ip_application_security_manager 541 big-ip_advanced_firewall_manager 514 big-ip_local_traffic_manager 503 big-ip_policy_enforcement_manager 495 big-ip_link_controller 487 big-ip_application_acceleration_manager 486 big-ip_analytics 473 big-ip_global_traffic_manager 452 big-ip_domain_name_system 429 big-ip_fraud_protection_service 367 big-ip_webaccelerator 259 big-ip_edge_gateway 255 big-ip_advanced_web_application_firewall 155 big-ip_websafe 137 big-ip_ddos_hybrid_defender 127 big-ip_ssl_orchestrator 108 big-iq_centralized_management 77 big-ip_carrier-grade_nat 71 big-ip_application_visibility_and_reporting 70 big-ip_protocol_security_module 61 big-ip_container_ingress_services 48 big-ip_automation_toolchain 47 BIG-IP 46 nginx 41 enterprise_manager 39 njs 39 big-ip_wan_optimization_manager 38 traffix_signaling_delivery_controller 31 ssl_orchestrator 27
Quick Filters
Critical CVEs With Exploits In CISA KEV