Approved changes feed: RSS · Atom

cpe:2.3:a:f5:big-ip_access_policy_manager:13.1.5:*:*:*:*:*:*:*

part: a version: 13.1.5 update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductBig Ip Access Policy Manager (78341655-a047-5c86-a17e-6a3bb8e6914c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-22374 vulnerable 2026-06-08 05:54:24.952236 iControl SOAP vulnerability
HIGH (7.5)
A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, potentially execute arbitrary code. In appliance mode BIG-IP, a successful exploit of this vulnerability can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2023-02-01T17:54:46.798Z
Updated: 2025-03-26T17:51:00.789Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29491 vulnerable 2026-06-08 05:42:48.065171 Details available
HIGH (7.5)
On F5 BIG-IP LTM, Advanced WAF, ASM, or APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a virtual server is configured with HTTP, TCP on one side (client/server), and DTLS on the other (server/client), undisclosed requests can cause the TMM process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:49:14.729Z
Updated: 2024-09-16T18:03:59.842Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29480 vulnerable 2026-06-08 05:42:48.005661 Details available
MEDIUM (5.3)
On F5 BIG-IP 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when multiple route domains are configured, undisclosed requests to big3d can cause an increase in CPU resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:47:53.227Z
Updated: 2024-09-17T04:29:06.587Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29479 vulnerable 2026-06-08 05:42:47.960330 Details available
MEDIUM (5.3)
On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Management all versions of 8.x and 7.x, when an IPv6 self IP address is configured and the ipv6.strictcompliance database key is enabled (disabled by default) on a BIG-IP system, undisclosed packets may cause decreased performance. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:45:58.183Z
Updated: 2024-09-17T01:01:23.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29474 vulnerable 2026-06-08 05:42:47.836211 Details available
MEDIUM (4.3)
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a directory traversal vulnerability exists in iControl SOAP that allows an authenticated attacker with at least guest role privileges to read wsdl files in the BIG-IP file system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:45:00.544Z
Updated: 2024-09-17T03:42:46.407Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29473 vulnerable 2026-06-08 05:42:47.827030 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29263 vulnerable 2026-06-08 05:42:47.503509 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28714 vulnerable 2026-06-08 05:42:45.194325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28705 vulnerable 2026-06-08 05:42:45.099216 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28691 vulnerable 2026-06-08 05:42:45.009735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27878 vulnerable 2026-06-08 05:42:43.507484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27806 vulnerable 2026-06-08 05:42:43.330517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27636 vulnerable 2026-06-08 05:42:42.576228 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27230 vulnerable 2026-06-08 05:41:55.046961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27189 vulnerable 2026-06-08 05:41:54.929731 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27181 vulnerable 2026-06-08 05:41:54.897908 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26890 vulnerable 2026-06-08 05:41:54.399917 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26835 vulnerable 2026-06-08 05:41:53.255314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26517 vulnerable 2026-06-08 05:41:52.317287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26372 vulnerable 2026-06-08 05:41:51.383460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26340 vulnerable 2026-06-08 05:41:51.028260 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26130 vulnerable 2026-06-08 05:41:50.607892 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26071 vulnerable 2026-06-08 05:41:50.296227 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25946 vulnerable 2026-06-08 05:41:49.746227 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1468 vulnerable 2026-06-08 05:39:13.212550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1389 vulnerable 2026-06-08 05:39:12.866106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.