Skip to content
OpenAdvisories
High WID-SEC-2025-2191 23 CVEs

F5 BIG-IP: Mehrere Schwachstellen

Published Jan 19, 2022 · Updated Oct 5, 2025 · Revision 2 · de-DE

Vendor: F5 Product: BIG-IP

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in F5 BIG-IP ausnutzen, um einen Cross Site Scripting Angriff durchzuführen, einen Denial of Service zu verursachen oder Informationen offenzulegen.

Product

Die BIG-IP ist eine Netzwerk Appliance auf der die meisten F5 Produkte laufen.

Vulnerabilities 23

  • Unscored —
    CVE-2022-23010

    On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1…

  • Unscored —
    CVE-2022-23011

    On certain hardware BIG-IP platforms, in version 15.1.x before 15.1.4 and 14.1.x before 14.1.3, virtual servers may sto…

  • Unscored —
    CVE-2022-23012

    On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is configured on a virtua…

  • Unscored —
    CVE-2022-23013

    On BIG-IP DNS & GTM version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.…

  • Unscored —
    CVE-2022-23014

    On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP APM portal access is configured on a virtual s…

  • Unscored —
    CVE-2022-23015

    On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, and 14.1.2.6-14.1.4.4, when a Client SSL profile is conf…

  • Unscored —
    CVE-2022-23016

    On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP SSL Forward Proxy with TLS 1.3 is configured o…

  • Unscored —
    CVE-2022-23017

    On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when …

  • Unscored —
    CVE-2022-23018

    On BIG-IP AFM version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and 13.1.x beginning in 13.…

  • Unscored —
    CVE-2022-23019

    On BIG-IP version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and …

  • Unscored —
    CVE-2022-23020

    On BIG-IP version 16.1.x before 16.1.2, when the 'Respond on Error' setting is enabled on the Request Logging profile a…

  • Unscored —
    CVE-2022-23021

    On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server, un…

  • Unscored —
    CVE-2022-23022

    On BIG-IP version 16.1.x before 16.1.2, when an HTTP profile is configured on a virtual server, undisclosed requests ca…

  • Unscored —
    CVE-2022-23023

    On BIG-IP version 16.1.x before 16.1.2.1, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x and …

  • Unscored —
    CVE-2022-23024

    On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.2, and all versions of 13.1.x, w…

  • Unscored —
    CVE-2022-23025

    On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, when …

  • Unscored —
    CVE-2022-23026

    On BIG-IP ASM & Advanced WAF version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all vers…

  • Unscored —
    CVE-2022-23027

    On BIG-IP versions 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, 13.1.x beginning in 13.1.3.6, 12.1.5.3-12.1.6, and 11.…

  • Unscored —
    CVE-2022-23028

    On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x, whe…

  • Unscored —
    CVE-2022-23029

    On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.…

  • Unscored —
    CVE-2022-23030

    On version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when the B…

  • Unscored —
    CVE-2022-23031

    On BIG-IP FPS, ASM, and Advanced WAF versions 16.1.x before 16.1.1, 15.1.x before 15.1.4, and 14.1.x before 14.1.4.4, a…

  • Unscored —
    CVE-2022-23032

    In all versions before 7.2.1.4, when proxy settings are configured in the network access resource of a BIG-IP APM syste…

    Windows Browsers

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2022-28133, EUVD-2022-28137, EUVD-2022-28140, EUVD-2022-28136, EUVD-2022-28139, EUVD-2022-28138, EUVD-2022-28134, EUVD-2022-28135, EUVD-2022-28132, EUVD-2022-28141

  2. #1

    Initiale Fassung

References