CyberSecBulletin

BIG-IP AFM vulnerabilities

We track 2 vulnerabilities in BIG-IP AFM products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 25, 2022.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest BIG-IP AFM vulnerabilities

  • 7.5 High severity

    BIG-IP AFM: Uncontrolled Resource Consumption

    CVE-2022-23024BIG-IP AFM

    On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.2, and all versions of 13.1.x, when the IPsec application layer gateway (ALG) logging profile is configured on an IPsec ALG virtual server, undisclosed IPsec traffic can cau

  • 7.5 High severity

    BIG-IP AFM: Improper Handling of Exceptional Conditions

    CVE-2022-23018BIG-IP AFM

    On BIG-IP AFM version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and 13.1.x beginning in 13.1.3.4, when a virtual server is configured with both HTTP protocol security and HTTP Proxy Connect profiles, undisclosed requests can cause t