Skip to content
OpenAdvisories

Archive

26 October 2023

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.8
    CVE-2023-46748 Exploited

    BIG-IP Configuration utility authenticated SQL injection vulnerability

    An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary…

    KEV Oct 31, 2023
  • Critical 9.8
    CVE-2023-46747 Exploited · Ransomware Public exploit Scanner template EPSS 97%

    BIG-IP Configuration utility unauthenticated remote code execution vulnerability

    Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have …

    KEV Oct 31, 2023
  • Critical 9.8
    CVE-2023-43208 Exploited · Ransomware Public exploit Scanner template EPSS 86%

    NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that…

    KEV May 20, 2024