Archive
26 October 2023
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
High 8.8CVE-2023-46748 Exploited
BIG-IP Configuration utility authenticated SQL injection vulnerability
An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary…
KEV Oct 31, 2023 -
Critical 9.8
BIG-IP Configuration utility unauthenticated remote code execution vulnerability
Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands. Note: Software versions which have …
KEV Oct 31, 2023 -
Critical 9.8
NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that…
KEV May 20, 2024