BIG-IP

CVE-2023-38423 | BIG-IP

August 2, 2023August 3, 2023

A cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context… Read More »CVE-2023-38423 | BIG-IP

CVE-2023-38138 | BIG-IP

August 2, 2023August 3, 2023

A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which allows an attacker to run JavaScript in the… Read More »CVE-2023-38138 | BIG-IP

CVE-2023-3470 | BIG-IP

August 2, 2023August 3, 2023

Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards generate a deterministic password for the Crypto User account. The predictable nature of the password… Read More »CVE-2023-3470 | BIG-IP

F5 Products & Log4j Vulnerability

December 18, 2021December 18, 2021

Most of the F5 products are not affected by Log4j vulnerability except the Traffic SDC product because of the Elastic Search component used in 5.2.0… Read More »F5 Products & Log4j Vulnerability