Vulnerabilidades do F5 Big-ip Fraud Protection Services
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam F5 Big-ip Fraud Protection Services: 2 registro(s), com versões afetadas e correções.cpe:2.3:a:f5:big-ip_fraud_protection_services
CVE-2023-46747
Crítica · 9.8
KEV Urgente · 93 Exploit público Ransomware CWE-306 26/10/2023
F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability
Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
CVE-2023-46748
Alta · 8.8
KEV Alta · 55 CWE-89 26/10/2023
F5 BIG-IP Configuration Utility SQL Injection Vulnerability
An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which
may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary system commands.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated