F5 Big-IP Advanced Web Application Firewall 15.1.5
Approved changes feed: RSS · Atom
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:15.1.5:*:*:*:*:*:*:*
part: a version: 15.1.5 update: *
| Vendor | F5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5) |
|---|---|
| Product | Big Ip Advanced Web Application Firewall (f3dd36bd-12f4-50d0-a9c3-130a39781129) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-29491 |
vulnerable | 2026-06-08 05:42:48.076185 |
Details available
HIGH (7.5)
On F5 BIG-IP LTM, Advanced WAF, ASM, or APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a virtual server is configured with HTTP, TCP on one side (client/server), and DTLS on the other (server/client), undisclosed requests can cause the TMM process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:49:14.729Z
Updated: 2024-09-16T18:03:59.842Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-27806 |
vulnerable | 2026-06-08 05:42:43.342856 |
Details available
HIGH (8.7)
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, when running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing command injection vulnerabilities in undisclosed URIs in F5 BIG-IP Guided Configuration. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:29:58.078Z
Updated: 2024-09-17T01:36:21.373Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26890 |
vulnerable | 2026-06-08 05:41:54.400555 |
Details available
HIGH (7.5)
On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prior to 16.1.2.1, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when ASM or Advanced WAF, as well as APM, are configured on a virtual server, the ASM policy is configured with Session Awareness, and the "Use APM Username and Session ID" option is enabled, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:06:28.626Z
Updated: 2024-09-16T17:03:22.543Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25946 |
vulnerable | 2026-06-08 05:41:49.769507 |
Details available
HIGH (8.7)
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, when running in Appliance mode, an authenticated attacker with Administrator role privilege may be able to bypass Appliance mode restrictions due to a missing integrity check in F5 BIG-IP Guided Configuration. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:21:26.941Z
Updated: 2024-09-17T03:28:41.853Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.