Approved changes feed: RSS · Atom

cpe:2.3:a:f5:f5os-a:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductF5Os A (e69d6c8a-a072-59a7-8eea-53ae3b968b36)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-22657 vulnerable 2026-06-08 05:54:26.718448 F5OS vulnerability
HIGH (7)
On F5OS-A beginning in version 1.2.0 to before 1.3.0 and F5OS-C beginning in version 1.3.0 to before 1.5.0, processing F5OS tenant file names may allow for command injection. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2023-02-01T17:56:01.101Z
Updated: 2025-03-26T17:49:38.336Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41835 vulnerable 2026-06-08 05:49:28.696080 F5OS vulnerability CVE-2022-41835
HIGH (7.3)
In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.5.0, excessive file permissions in F5OS allows an authenticated local attacker to execute limited set of commands in a container and impact the F5OS controller.
Published: 2022-10-19T21:24:53.599Z
Updated: 2025-05-07T20:52:17.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41780 vulnerable 2026-06-08 05:48:30.949951 F5OS CLI vulnerability CVE-2022-41780
MEDIUM (5.5)
In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.4.0, a directory traversal vulnerability exists in an undisclosed location of the F5OS CLI that allows an attacker to read arbitrary files.
Published: 2022-10-19T21:22:10.493Z
Updated: 2025-05-08T18:59:13.435Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25990 vulnerable 2026-06-08 05:41:49.818523 Details available
MEDIUM (5.3)
On 1.0.x versions prior to 1.0.1, systems running F5OS-A software may expose certain registry ports externally. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:22:13.962Z
Updated: 2024-09-17T00:46:36.502Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.