CVE-2024-26026

An SQL injection vulnerability exists in the BIG-IP Next Central Manager API URI. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-25560

When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-27202

A DOM-based cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-27202

A DOM-based cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-21793

An OData injection vulnerability exists in the BIG-IP Next Central Manager API URI. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-32761 BIG-IP TMM tenants on VELOS and rSeries vulnerability

Under certain conditions, a data leak may occur in the Traffic Management Microkernels TMMs of BIG-IP tenants running on VELOS and rSeries platforms. This leak occurs randomly and cannot be deliberately triggered. If it occurs, it may leak up to 64 bytes of non-contiguous randomized bytes. Under...

CVE-2024-32761 BIG-IP TMM tenants on VELOS and rSeries vulnerability

Under certain conditions, a data leak may occur in the Traffic Management Microkernels TMMs of BIG-IP tenants running on VELOS and rSeries platforms. This leak occurs randomly and cannot be deliberately triggered. If it occurs, it may leak up to 64 bytes of non-contiguous randomized bytes. Under...

CVE-2024-32761

CVE-2024-32761 affects BIG-IP TMM tenants on VELOS and rSeries. The issue is a data leakage in the TMM that can randomly expose up to 64 bytes of non-contiguous randomized data; under rare conditions it may trigger a TMM restart, impacting availability. Affected versions are 15.1.0 through 15.1.9...

CVE-2024-26026 BIG-IP Central Manager SQL Injection

An SQL injection vulnerability exists in the BIG-IP Next Central Manager API URI. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-26026

CVE-2024-26026: SQL injection in BIG-IP Next Central Manager API (URI) allows an unauthenticated remote attacker to execute malicious SQL statements. Affected: BIG-IP Next Central Manager versions 20.0.1–20.1.0. Remediation: upgrade to 20.2.0 or later as specified by K000138733; Nessus/K0- querie...

CVE-2024-33612

CVE-2024-33612 affects BIG-IP Next Central Manager. An improper certificate validation vulnerability could allow a man‑in‑the‑middle attacker to impersonate an Instance Provider system during instantiation, potentially crossing a security boundary. Affected line shows BIG-IP Next Central Manager ...

CVE-2024-33612 BIG-IP Next Central Manager vulnerability

An improper certificate validation vulnerability exists in BIG-IP Next Central Manager and may allow an attacker to impersonate an Instance Provider system. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-26026 BIG-IP Central Manager SQL Injection

An SQL injection vulnerability exists in the BIG-IP Next Central Manager API URI. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-33612 BIG-IP Next Central Manager vulnerability

An improper certificate validation vulnerability exists in BIG-IP Next Central Manager and may allow an attacker to impersonate an Instance Provider system. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-21793

CVE-2024-21793 : An OData injection vulnerability exists in the BIG-IP Next Central Manager API. Affected: BIG-IP Next Central Manager versions 20.0.1 to 20.1.0. Impact: unauthenticated remote attackers can execute malicious SQL statements via the API, potentially bypassing authentication or exfi...

CVE-2024-21793 BIG-IP Central Manager OData Injection Vulnerability

An OData injection vulnerability exists in the BIG-IP Next Central Manager API URI. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-21793 BIG-IP Central Manager OData Injection Vulnerability

An OData injection vulnerability exists in the BIG-IP Next Central Manager API URI. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-33604

CVE-2024-33604 affects F5 BIG-IP Configuration Utility. A reflected XSS exists in an undisclosed page, enabling JavaScript execution in the context of the logged-in user (potentially escalating to admin if via Advanced Shell). Affected versions include 17.1.0–17.1.1, 16.1.0–16.1.4, and 15.1.0–15....

CVE-2024-31156 BIG-IP Configuration utility XSS vulnerability

A stored cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-33604 BIG-IP Configuration utility XSS vulnerability

A reflected cross-site scripting XSS vulnerability exist in undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...