CVE-2021-23046

CVE-2021-23046 affects BIG-IP Guided Configuration. When a configuration containing secure properties is created and deployed from Access Guided Configuration (AGC), secure properties are logged in restnoded logs, exposing sensitive information. The issue applies to Guided Configuration versions ...

CVE-2022-27806

CVE-2022-27806 affects BIG-IP Guided Configuration in Appliance mode. An authenticated Administrator can bypass Appliance mode restrictions by exploiting command injection in undisclosed Guided Configuration URIs. Vulnerable are BIG-IP versions 11.6.x, 12.1.x, 13.1.x, 14.1.x, 15.1.x, and 16.1.x (...

CVE-2022-27230

CVE-2022-27230 describes a reflected XSS vulnerability in F5 BIG-IP Guided Configuration (GC) pages and BIG-IP APM. Affected: BIG-IP APM (versions 11.6–16.1.x) and GC (prior to 9.0). Root cause: reflected JavaScript execution in an undisclosed GC page when accessed by an authenticated user; explo...