Approved changes feed: RSS · Atom

cpe:2.3:a:f5:big-ip_fraud_protection_services:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductBig Ip Fraud Protection Services (4d49fdb0-2d00-56fb-ae76-94d220791ef1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46748 vulnerable 2026-06-08 06:14:23.138521 BIG-IP Configuration utility authenticated SQL injection vulnerability
HIGH (8.8)
An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2023-10-26T20:05:04.967Z
Updated: 2025-10-21T23:05:33.293Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46747 vulnerable 2026-06-08 06:14:23.129564 BIG-IP Configuration utility unauthenticated remote code execution vulnerability
CRITICAL (9.8)
Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2023-10-26T20:04:53.929Z
Updated: 2025-10-21T23:05:33.431Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.