Lucene search
+L

8459 matches found

NVD
NVD
•added 2024/02/14 5:15 p.m.•49 views

CVE-2024-22389

When BIG-IP is deployed in high availability HA and an iControl REST API token is updated, the change does not sync to the peer device. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

7.2CVSS6.9AI score0.00497EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/14 5:15 p.m.•34 views

Design/Logic Flaw

When BIG-IP is deployed in high availability HA and an iControl REST API token is updated, the change does not sync to the peer device. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

5.8CVSS7.3AI score0.00497EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/14 4:30 p.m.•23 views

CVE-2024-22389 BIG-IP iControl REST API Vulnerability

When BIG-IP is deployed in high availability HA and an iControl REST API token is updated, the change does not sync to the peer device. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

7.2CVSS6.8AI score0.00497EPSS
SaveExploits0References1
CVE
CVE
•added 2024/02/14 4:30 p.m.•119 views

CVE-2024-22389

CVE-2024-22389 affects BIG-IP in HA deployments where updating an iControl REST API token fails to sync to the peer, a control-plane issue impacting confidentiality, integrity, and availability (CVSS v3.1 base 7.2). Affected releases and fixes: BIG-IP (all modules) vulnerable in 17.1.0; fix intro...

7.2CVSS7.1AI score0.00497EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/02/14 4:30 p.m.•48 views

CVE-2024-22389 BIG-IP iControl REST API Vulnerability

When BIG-IP is deployed in high availability HA and an iControl REST API token is updated, the change does not sync to the peer device. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

7.2CVSS7.1AI score0.00497EPSS
SaveExploits0References1
F5 Networks
F5 Networks
•added 2024/02/14 1:14 p.m.•56 views

K32544615: BIG-IP iControl REST API vulnerability CVE-2024-22389

Security Advisory Description When BIG-IP is deployed in high availability HA and an iControl REST API token is updated, the change does not sync to the peer device. CVE-2024-22389 Impact This vulnerability may allow a high privileged remote authenticated attacker to use deleted or updated API...

7.2CVSS6.9AI score0.00497EPSS
SaveExploits0Affected Software12
GithubExploit
GithubExploit
•added 2024/02/14 11:30 a.m.•477 views

Exploit for Missing Authorization in Xlplugins Nextmove

CVE-2024-25092 NextMove Lite 2.18.0 - Subscriber+ Arbitra...

8.8CVSS8.5AI score0.01376EPSS
SaveExploits3
NVD
NVD
•added 2024/02/14 9:15 a.m.•39 views

CVE-2023-44294

In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance between v5.10.00.00 and v5.18.00.00, a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of Collection Rest API. This issue may potentially...

6.5CVSS5.3AI score0.00444EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/14 9:15 a.m.•29 views

Information disclosure

In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance between v5.10.00.00 and v5.18.00.00, a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of Collection Rest API. This issue may potentially...

5.5CVSS6.8AI score0.00444EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/14 8:24 a.m.•22 views

CVE-2023-44294

In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance between v5.10.00.00 and v5.18.00.00, a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of Collection Rest API. This issue may potentially...

5.4CVSS6.5AI score0.00444EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/02/14 8:24 a.m.•39 views

CVE-2023-44294

In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance between v5.10.00.00 and v5.18.00.00, a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of Collection Rest API. This issue may potentially...

5.4CVSS5.6AI score0.00444EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/14 8:15 a.m.•32 views

CVE-2023-44293

In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance between v5.10.00.00 and v5.18.00.00, a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of IP Range Rest API. This issue may potentially le...

6.5CVSS5.3AI score0.00444EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/14 8:15 a.m.•27 views

Information disclosure

In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance between v5.10.00.00 and v5.18.00.00, a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of IP Range Rest API. This issue may potentially le...

5.5CVSS6.8AI score0.00444EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/14 8:05 a.m.•54 views

CVE-2023-44293

In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance between v5.10.00.00 and v5.18.00.00, a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of IP Range Rest API. This issue may potentially le...

5.4CVSS6.8AI score0.00444EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/02/14 8:05 a.m.•38 views

CVE-2023-44293

In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance between v5.10.00.00 and v5.18.00.00, a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of IP Range Rest API. This issue may potentially le...

5.4CVSS5.6AI score0.00444EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/02/14 12:00 a.m.•21 views

F5 BIG-IP Security Vulnerabilities

F5 BIG-IP is an application delivery platform from F5 Corporation that integrates network traffic management, application security management, and load balancing. A security vulnerability exists in the F5 BIG-IP that originates when the BIG-IP is deployed with High Availability HA and an iControl...

7.2CVSS6.8AI score0.00497EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/02/14 12:00 a.m.•15 views

Dell EMC Secure Connect Gateway SQL注入漏洞

The Dell Secure Connect Gateway Application is a secure connectivity gateway from Dell, USA. The Dell Secure Connect Gateway Application suffers from a SQL injection vulnerability that can be exploited by an attacker to inject malicious content into the filters of the Collection Rest API, resulti...

6.5CVSS7.5AI score0.00444EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/14 12:00 a.m.•5 views

CVE-2023-44294: Improper Neutralization of Special Elements used in an SQL Command

In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance between v5.10.00.00 and v5.18.00.00, a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of Collection Rest API. This issue may potentially...

6.5CVSS5.7AI score0.00444EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/02/14 12:00 a.m.•34 views

F5 Networks BIG-IP : BIG-IP iControl REST API vulnerability (K32544615)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.9 / 16.1.4 / 17.1.1. It is, therefore, affected by a vulnerability as referenced in the K32544615 advisory. When BIG-IP is deployed in high availability HA and an iControl REST API token is updated, the change does no...

7.2CVSS7.1AI score0.00497EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/14 12:00 a.m.•3 views

CVE-2024-22389: Insufficient Session Expiration

When BIG-IP is deployed in high availability HA and an iControl REST API token is updated, the change does not sync to the peer device. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

7.2CVSS5.7AI score0.00497EPSS
SaveExploits0References2
Rows per page
Query Builder