K000133251: Overview of F5 vulnerabilities (May 2023)

🗓️ 03 May 2023 13:05:26Reported by f5Type

f5🔗 my.f5.com👁 34 Views

Overview of F5 vulnerabilities and security exposures for May 2023. Includes affected products and fixed version

Reporter	Title	Published	Views	Family All 119
BDU FSTEC	The vulnerabilities of the NGINX Instance Manager automation platform, the NGINX API Connectivity Manager connection management controller, and the NGINX Security Monitoring security monitoring and management platform are related to the improper use of standard permissions. This allows attackers to increase their privileges.	17 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the NGINX Instance Manager automation platform, the NGINX API Connectivity Manager connection management controller, and the NGINX Security Monitoring security monitoring platform involve exploiting authentication bypasses through the use of user-controlled keys. This allows attackers to circumvent security restrictions and gain access to read, modify, or delete data.	17 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Traffic Management User Interface (TMUI) of the BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, and BIG-IP Domain Name System programs allows attackers to execute cross-site scripting attacks.	19 May 202300:00	–	bdu_fstec
Circl	CVE-2023-22372	24 Nov 202314:38	–	circl
Circl	CVE-2023-29240	18 Sep 202520:47	–	circl
CNNVD	F5 BIG-IQ 代码问题漏洞	3 May 202300:00	–	cnnvd
CNNVD	F5 BIG-IP 安全漏洞	3 May 202300:00	–	cnnvd
CNNVD	F5 BIG-IP 操作系统命令注入漏洞	3 May 202300:00	–	cnnvd
CNNVD	F5 BIG-IP 安全漏洞	3 May 202300:00	–	cnnvd
CNNVD	F5 BIG-IP 安全漏洞	3 May 202300:00	–	cnnvd

18 Aug 2023 07:05Current

6Medium risk

Vulners AI Score6

CVSS 3.18.1 - 8.8

EPSS0.01474

SSVC

f5 vulnerabilities security exposures may 2023 nginx big-ip cve affected versions fixes introduced managed services rss feed upgrades eots phase