Approved changes feed: RSS · Atom

cpe:2.3:a:f5:big-ip_advanced_waf_&_asm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductBig Ip Advanced Waf & Asm (ceba8308-c538-50b5-aed5-822f0482bd23)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-41836 vulnerable 2026-06-08 05:49:28.699780 BIG-IP Advanced WAF and ASM bd vulnerability CVE-2022-41836
HIGH (7.5)
When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.
Published: 2022-10-19T21:25:43.571Z
Updated: 2025-05-07T20:51:50.072Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41691 not_vulnerable 2026-06-08 05:48:30.793870 BIG-IP Advanced WAF/ASM bd vulnerability CVE-2022-41691
HIGH (7.5)
When a BIG-IP Advanced WAF/ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.
Published: 2022-10-19T21:19:45.651Z
Updated: 2025-05-08T18:13:02.493Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41617 not_vulnerable 2026-06-08 05:48:30.619666 BIG-IP Advanced WAF and ASM iControl REST vulnerability CVE-2022-41617
HIGH (7.2)
In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, When the Advanced WAF / ASM module is provisioned, an authenticated remote code execution vulnerability exists in the BIG-IP iControl REST interface.
Published: 2022-10-19T21:19:03.589Z
Updated: 2025-05-08T18:15:10.941Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.