F5 Big-IP Application Security Manager 17.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:f5:big-ip_application_security_manager:17.0.0:*:*:*:*:*:*:*
part: a version: 17.0.0 update: *
| Vendor | F5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5) |
|---|---|
| Product | Big Ip Application Security Manager (bdeb74b5-81bf-5197-b43b-cd93c9ae22d0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-29163 |
vulnerable | 2026-06-08 06:02:38.853390 |
BIG-IP UDP Profile vulnerability
HIGH (7.5)
When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2023-05-03T14:34:54.385Z
Updated: 2025-02-03T18:45:15.885Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22374 |
vulnerable | 2026-06-08 05:54:24.960198 |
iControl SOAP vulnerability
HIGH (7.5)
A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, potentially execute arbitrary code. In appliance mode BIG-IP, a successful exploit of this vulnerability can allow the attacker to cross a security boundary.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2023-02-01T17:54:46.798Z
Updated: 2025-03-26T17:51:00.789Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41836 |
vulnerable | 2026-06-08 05:49:28.702712 |
BIG-IP Advanced WAF and ASM bd vulnerability CVE-2022-41836
HIGH (7.5)
When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.
Published: 2022-10-19T21:25:43.571Z
Updated: 2025-05-07T20:51:50.072Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41800 |
vulnerable | 2026-06-08 05:48:31.041428 |
Appliance mode iControl REST vulnerability
HIGH (8.7)
In all versions of BIG-IP, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a security boundary.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2022-12-07T03:12:17.395Z
Updated: 2025-04-23T13:33:29.909Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41622 |
vulnerable | 2026-06-08 05:48:30.636814 |
iControl SOAP vulnerability
HIGH (8.8)
In all versions,
BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2022-12-07T03:08:06.811Z
Updated: 2025-04-23T13:36:49.162Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35728 |
vulnerable | 2026-06-08 05:46:05.210668 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35272 |
vulnerable | 2026-06-08 05:46:04.455563 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34851 |
vulnerable | 2026-06-08 05:46:03.705518 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33968 |
vulnerable | 2026-06-08 05:44:51.903358 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33962 |
vulnerable | 2026-06-08 05:44:51.868687 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29491 |
vulnerable | 2026-06-08 05:42:48.080234 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29480 |
vulnerable | 2026-06-08 05:42:48.010249 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29479 |
vulnerable | 2026-06-08 05:42:47.965203 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29474 |
vulnerable | 2026-06-08 05:42:47.894164 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28707 |
vulnerable | 2026-06-08 05:42:45.126247 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28705 |
vulnerable | 2026-06-08 05:42:45.103342 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28691 |
vulnerable | 2026-06-08 05:42:45.026246 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27189 |
vulnerable | 2026-06-08 05:41:54.932307 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26835 |
vulnerable | 2026-06-08 05:41:53.258627 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26372 |
vulnerable | 2026-06-08 05:41:51.387020 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26340 |
vulnerable | 2026-06-08 05:41:51.031757 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26071 |
vulnerable | 2026-06-08 05:41:50.373906 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1468 |
vulnerable | 2026-06-08 05:39:13.220791 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1389 |
vulnerable | 2026-06-08 05:39:12.963763 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.