Approved changes feed: RSS · Atom

cpe:2.3:a:f5:big-ip_local_traffic_manager:13.1.5:*:*:*:*:*:*:*

part: a version: 13.1.5 update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductBig Ip Local Traffic Manager (eacaa1bd-0d1a-5e40-908d-f54667e54915)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-22374 vulnerable 2026-06-08 05:54:24.966693 iControl SOAP vulnerability
HIGH (7.5)
A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, potentially execute arbitrary code. In appliance mode BIG-IP, a successful exploit of this vulnerability can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2023-02-01T17:54:46.798Z
Updated: 2025-03-26T17:51:00.789Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29491 vulnerable 2026-06-08 05:42:48.080708 Details available
HIGH (7.5)
On F5 BIG-IP LTM, Advanced WAF, ASM, or APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a virtual server is configured with HTTP, TCP on one side (client/server), and DTLS on the other (server/client), undisclosed requests can cause the TMM process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:49:14.729Z
Updated: 2024-09-16T18:03:59.842Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29480 vulnerable 2026-06-08 05:42:48.016705 Details available
MEDIUM (5.3)
On F5 BIG-IP 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when multiple route domains are configured, undisclosed requests to big3d can cause an increase in CPU resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:47:53.227Z
Updated: 2024-09-17T04:29:06.587Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29479 vulnerable 2026-06-08 05:42:47.969133 Details available
MEDIUM (5.3)
On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Management all versions of 8.x and 7.x, when an IPv6 self IP address is configured and the ipv6.strictcompliance database key is enabled (disabled by default) on a BIG-IP system, undisclosed packets may cause decreased performance. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:45:58.183Z
Updated: 2024-09-17T01:01:23.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29474 vulnerable 2026-06-08 05:42:47.941834 Details available
MEDIUM (4.3)
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a directory traversal vulnerability exists in iControl SOAP that allows an authenticated attacker with at least guest role privileges to read wsdl files in the BIG-IP file system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:45:00.544Z
Updated: 2024-09-17T03:42:46.407Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29473 vulnerable 2026-06-08 05:42:47.832265 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28705 vulnerable 2026-06-08 05:42:45.113439 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28691 vulnerable 2026-06-08 05:42:45.039816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27878 vulnerable 2026-06-08 05:42:43.555756 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27189 vulnerable 2026-06-08 05:41:54.935210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26835 vulnerable 2026-06-08 05:41:53.262085 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26517 vulnerable 2026-06-08 05:41:52.321377 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26372 vulnerable 2026-06-08 05:41:51.390063 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26340 vulnerable 2026-06-08 05:41:51.035268 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26130 vulnerable 2026-06-08 05:41:50.611683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26071 vulnerable 2026-06-08 05:41:50.454941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1468 vulnerable 2026-06-08 05:39:13.228161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1389 vulnerable 2026-06-08 05:39:13.060875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.