F5 Big Ip Fraud Protection Services vulnerabilities

2 vulnerabilities

Known vulnerabilities in F5 Big Ip Fraud Protection Services, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8HighCVE-2023-46748f5 · big-ip +20 moreBIG-IP Configuration utility authenticated SQL injection vulnerabilityAn authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluatedKEVEPSS4.47%9.8CriticalCVE-2023-46747f5 · big-ip +20 moreBIG-IP Configuration utility unauthenticated remote code execution vulnerabilityUndisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluatedKEVRansomwareEPSS96.52%