Big Ip Guided Configuration (Gc)
Approved changes feed: RSS · Atom
cpe:2.3:a:f5:big-ip_guided_configuration_(gc):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | F5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5) |
|---|---|
| Product | Big Ip Guided Configuration (Gc) (5ce46be8-86b0-5bb6-995b-65e783ff40ef) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-27878 |
vulnerable | 2026-06-08 05:42:43.506912 |
Details available
MEDIUM (6.8)
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, a stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to execute JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:31:45.750Z
Updated: 2025-04-23T18:31:15.632Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27806 |
vulnerable | 2026-06-08 05:42:43.330191 |
Details available
HIGH (8.7)
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, when running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing command injection vulnerabilities in undisclosed URIs in F5 BIG-IP Guided Configuration. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:29:58.078Z
Updated: 2024-09-17T01:36:21.373Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27230 |
vulnerable | 2026-06-08 05:41:55.046859 |
Details available
HIGH (7.5)
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP APM, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, a reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of F5 BIG-IP Guided Configuration that allows an attacker to execute JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:09:59.156Z
Updated: 2024-09-17T01:15:51.928Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25946 |
vulnerable | 2026-06-08 05:41:49.742748 |
Details available
HIGH (8.7)
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, when running in Appliance mode, an authenticated attacker with Administrator role privilege may be able to bypass Appliance mode restrictions due to a missing integrity check in F5 BIG-IP Guided Configuration. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:21:26.941Z
Updated: 2024-09-17T03:28:41.853Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.