F5 Big-ip Fraud Protection Services vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting F5 Big-ip Fraud Protection Services: 2 record(s), with affected versions and fixes.cpe:2.3:a:f5:big-ip_fraud_protection_services
CVE-2023-46747
Critical · 9.8
KEV Urgent · 93 Public exploit Ransomware CWE-306 Oct 26, 2023
F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability
Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
CVE-2023-46748
High · 8.8
KEV High · 55 CWE-89 Oct 26, 2023
F5 BIG-IP Configuration Utility SQL Injection Vulnerability
An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which
may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary system commands.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated