Skip to content
OpenAdvisories
Low · 3.8 CVE-2024-23603 EUVD-2024-21097GHSA-c7f4-j25r-jvjf

BIG-IP Advanced WAF and ASM Configuration utility vulnerability

Published Feb 14, 2024 · Updated Aug 1, 2024 · Assigned by f5

Vendor: F5 Product: BIG-IP Category: Network devices

Description

An SQL injection vulnerability exists in an undisclosed page of the BIG-IP Configuration utility.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Affected products

VendorProductAffectedFixed
F5 BIG-IP 17.1.0 – < 17.1.1, 16.1.0 – < 16.1.4, 15.1.0 – < 15.1.10 17.1.1

Advisories 1

References