Approved changes feed: RSS · Atom

cpe:2.3:a:f5:big-ip_access_policy_manager:17.0.0:*:*:*:*:*:*:*

part: a version: 17.0.0 update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductBig Ip Access Policy Manager (78341655-a047-5c86-a17e-6a3bb8e6914c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-39447 vulnerable 2026-06-08 06:09:37.496630 BIG-IP APM Guided Configuration vulnerability
MEDIUM (4.4)
When BIG-IP APM Guided Configurations are configured, undisclosed sensitive information may be logged in restnoded log.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2023-10-10T12:32:21.469Z
Updated: 2024-09-18T20:35:21.196Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29163 vulnerable 2026-06-08 06:02:38.843322 BIG-IP UDP Profile vulnerability
HIGH (7.5)
When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2023-05-03T14:34:54.385Z
Updated: 2025-02-03T18:45:15.885Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22374 vulnerable 2026-06-08 05:54:24.952901 iControl SOAP vulnerability
HIGH (7.5)
A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, potentially execute arbitrary code. In appliance mode BIG-IP, a successful exploit of this vulnerability can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2023-02-01T17:54:46.798Z
Updated: 2025-03-26T17:51:00.789Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41800 vulnerable 2026-06-08 05:48:31.041290 Appliance mode iControl REST vulnerability
HIGH (8.7)
In all versions of BIG-IP, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a security boundary.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2022-12-07T03:12:17.395Z
Updated: 2025-04-23T13:33:29.909Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41622 vulnerable 2026-06-08 05:48:30.635750 iControl SOAP vulnerability
HIGH (8.8)
In all versions,  BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2022-12-07T03:08:06.811Z
Updated: 2025-04-23T13:36:49.162Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35728 vulnerable 2026-06-08 05:46:05.210298 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35272 vulnerable 2026-06-08 05:46:04.455412 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34851 vulnerable 2026-06-08 05:46:03.700733 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33968 vulnerable 2026-06-08 05:44:51.903039 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33962 vulnerable 2026-06-08 05:44:51.863393 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29491 vulnerable 2026-06-08 05:42:48.065487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29480 vulnerable 2026-06-08 05:42:48.006260 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29479 vulnerable 2026-06-08 05:42:47.961199 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29474 vulnerable 2026-06-08 05:42:47.836826 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29263 vulnerable 2026-06-08 05:42:47.504008 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28714 vulnerable 2026-06-08 05:42:45.194978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28707 vulnerable 2026-06-08 05:42:45.122197 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28705 vulnerable 2026-06-08 05:42:45.099658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28691 vulnerable 2026-06-08 05:42:45.013119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27189 vulnerable 2026-06-08 05:41:54.929964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26835 vulnerable 2026-06-08 05:41:53.255691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26372 vulnerable 2026-06-08 05:41:51.383811 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26340 vulnerable 2026-06-08 05:41:51.028841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26071 vulnerable 2026-06-08 05:41:50.299264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1468 vulnerable 2026-06-08 05:39:13.213203 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1389 vulnerable 2026-06-08 05:39:12.875895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.