BIG-IP Advanced WAF & ASM vulnerabilities

2 known vulnerabilities in BIG-IP Advanced WAF & ASM from F5. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  When an 'Attack Signature False Positive Mode' enabled security policy is configured on a…

  CVE-2022-41836Oct 19, 2022F5

  When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate.

• 7.2 High severity

  BIG-IP Advanced WAF & ASM: Improper Neutralization of Special Elements used in a Command

  CVE-2022-41617Oct 19, 2022F5EPSS 1.44%

  In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1, When the Advanced WAF / ASM module is provisioned, an authenticated remote code execution vulnerability exists in the BIG-IP iControl REST interface