Approved changes feed: RSS · Atom

cpe:2.3:a:f5:big-ip_advanced_firewall_manager:17.0.0:*:*:*:*:*:*:*

part: a version: 17.0.0 update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductBig Ip Advanced Firewall Manager (e9b9e21c-996b-5ec4-9014-0661575a4d57)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-29163 vulnerable 2026-06-08 06:02:38.845511 BIG-IP UDP Profile vulnerability
HIGH (7.5)
When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2023-05-03T14:34:54.385Z
Updated: 2025-02-03T18:45:15.885Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22374 vulnerable 2026-06-08 05:54:24.954804 iControl SOAP vulnerability
HIGH (7.5)
A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, potentially execute arbitrary code. In appliance mode BIG-IP, a successful exploit of this vulnerability can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2023-02-01T17:54:46.798Z
Updated: 2025-03-26T17:51:00.789Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41622 vulnerable 2026-06-08 05:48:30.632741 iControl SOAP vulnerability
HIGH (8.8)
In all versions,  BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2022-12-07T03:08:06.811Z
Updated: 2025-04-23T13:36:49.162Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35728 vulnerable 2026-06-08 05:46:05.210340 iControl REST vulnerability CVE-2022-35728
HIGH (8.1)
In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ version 8.x before 8.2.0 and all versions of 7.x, an authenticated user's iControl REST token may remain valid for a limited time after logging out from the Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2022-08-04T17:49:50.388Z
Updated: 2024-09-16T16:42:29.606Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35272 vulnerable 2026-06-08 05:46:04.455455 BIG-IP HTTP MRF vulnerability CVE-2022-35272
HIGH (7.5)
In BIG-IP Versions 17.0.x before 17.0.0.1 and 16.1.x before 16.1.3.1, when source-port preserve-strict is configured on an HTTP Message Routing Framework (MRF) virtual server, undisclosed traffic may cause the Traffic Management Microkernel (TMM) to produce a core file and the connection to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2022-08-04T17:49:42.631Z
Updated: 2024-09-17T03:18:33.743Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34851 vulnerable 2026-06-08 05:46:03.701946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33968 vulnerable 2026-06-08 05:44:51.903086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33962 vulnerable 2026-06-08 05:44:51.864872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29480 vulnerable 2026-06-08 05:42:48.007292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29479 vulnerable 2026-06-08 05:42:47.962244 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29474 vulnerable 2026-06-08 05:42:47.865775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28707 vulnerable 2026-06-08 05:42:45.124740 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28705 vulnerable 2026-06-08 05:42:45.100395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28695 vulnerable 2026-06-08 05:42:45.050217 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28691 vulnerable 2026-06-08 05:42:45.016219 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27189 vulnerable 2026-06-08 05:41:54.930471 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26835 vulnerable 2026-06-08 05:41:53.256477 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26372 vulnerable 2026-06-08 05:41:51.384682 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26340 vulnerable 2026-06-08 05:41:51.029442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26071 vulnerable 2026-06-08 05:41:50.326171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1468 vulnerable 2026-06-08 05:39:13.214582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1389 vulnerable 2026-06-08 05:39:12.896567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.