Big Ip Guided Configuration
Approved changes feed: RSS · Atom
cpe:2.3:a:f5:big-ip_guided_configuration:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | F5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5) |
|---|---|
| Product | Big Ip Guided Configuration (56aa07e8-624b-5652-b85d-625482fd0130) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-39447 |
vulnerable | 2026-06-08 06:09:37.497385 |
BIG-IP APM Guided Configuration vulnerability
MEDIUM (4.4)
When BIG-IP APM Guided Configurations are configured, undisclosed sensitive information may be logged in restnoded log.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2023-10-10T12:32:21.469Z
Updated: 2024-09-18T20:35:21.196Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27806 |
vulnerable | 2026-06-08 05:42:43.351598 |
Details available
HIGH (8.7)
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, when running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing command injection vulnerabilities in undisclosed URIs in F5 BIG-IP Guided Configuration. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:29:58.078Z
Updated: 2024-09-17T01:36:21.373Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27230 |
vulnerable | 2026-06-08 05:41:55.047393 |
Details available
HIGH (7.5)
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP APM, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, a reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of F5 BIG-IP Guided Configuration that allows an attacker to execute JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:09:59.156Z
Updated: 2024-09-17T01:15:51.928Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25946 |
vulnerable | 2026-06-08 05:41:49.784093 |
Details available
HIGH (8.7)
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, when running in Appliance mode, an authenticated attacker with Administrator role privilege may be able to bypass Appliance mode restrictions due to a missing integrity check in F5 BIG-IP Guided Configuration. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:21:26.941Z
Updated: 2024-09-17T03:28:41.853Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23046 |
vulnerable | 2026-06-08 05:30:02.252436 |
Details available
On all versions of Guided Configuration before 8.0.0, when a configuration that contains secure properties is created and deployed from Access Guided Configuration (AGC), secure properties are logged in restnoded logs. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2021-09-14T14:10:01.000Z
Updated: 2024-08-03T18:58:26.409Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.