F5 BIG IP Advanced WAF & ASM vulnerabilities

3 vulnerabilities

Known vulnerabilities in F5 BIG IP Advanced WAF & ASM, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5HighCVE-2022-41691f5 · big-ip advanced waf & asm +2 moreBIG-IP Advanced WAF/ASM bd vulnerability CVE-2022-41691When a BIG-IP Advanced WAF/ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.EPSS0.73%7.5HighCVE-2022-41836f5 · big-ip advanced waf & asm +2 moreBIG-IP Advanced WAF and ASM bd vulnerability CVE-2022-41836When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.EPSS0.73%7.2HighCVE-2022-41617f5 · big-ip advanced waf & asm +2 moreBIG-IP Advanced WAF and ASM iControl REST vulnerability CVE-2022-41617In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, When the Advanced WAF / ASM module is provisioned, an authenticated remote code execution vulnerability exists in the BIG-IP iControl REST interface.EPSS1.41%