Known vulnerabilities in BIG-IP 14.1.4.6

Software: BIG-IP
Version: 14.1.4.6
Software CPE: cpe:2.3:h:f5_networks:big-ip:*:*:*:*:*:*:*:*
Total vulnerabilities: 55
Public exploits: 2
Known exploited (KEV): 2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BIG-IP version 14.1.4.6 BIG-IP 14.1.4.6 is affected by 55 vulnerabilities: 5 high, 26 medium, 24 low Critical High Medium Low

Vulnerabilities (55)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85014 - Resource exhaustion
CVE-2023-40542
CWE-400 Medium
No
No
15.1.9, 16.1.4 05.01.2024 SB2023101198
#VU82544 - Authentication Bypass Using an Alternate Path or Channel
CVE-2023-46747
CWE-288 High
Public exploit available
Exploited
13.1.5.1 + hotfix-bigip-13.1.5.1.0.20.2-eng3, 14.1.5.6 + hotfix-bigip-14.1.5.6.0.10.6-eng3, 15.1.10.2 + hotfix-bigip-15.1.10.2.0.44.2-eng3, 16.1.4.1 + hotfix-bigip-16.1.4.1.0.50.5-eng3, 17.1.0.3 + hotfix-bigip-17.1.0.3.0.75.4-eng3 27.10.2023 SB2023102726
SB2024080142
#VU78885 - Improper input validation
CVE-2023-38419
CWE-20 Medium
No
No
14.1.5.5, 15.1.9.1, 16.1.3.5, 17.1.0.2 02.08.2023 SB2023080285
#VU71754 - Integer overflow
CVE-2022-25147
CWE-190 High
No
No
17.5.1.1 02.02.2023 SB2023020210
SB2023020212
SB2023020942
and 49 more
#VU64396 - Observable discrepancy
CVE-2022-23823
CWE-203 Medium
No
No
- 15.06.2022 SB2022061516
SB20250227198
SB20250227199
and 1 more
#VU64378 - Observable discrepancy
CVE-2022-24436
CWE-203 Medium
No
No
- 14.06.2022 SB2022061501
SB20250227202
SB20250227203
and 1 more
#VU63099 - Uncaught Exception
CVE-2021-0190
CWE-248 Low
No
No
- 12.05.2022 SB2022051714
SB2022062303
SB2022081211
and 13 more
#VU63082 - Out-of-bounds write
CVE-2021-0153
CWE-787 Low
No
No
- 12.05.2022 SB2022051714
SB2022062304
SB2022081211
and 13 more
#VU63081 - Improper input validation
CVE-2021-0154
CWE-20 Low
No
No
- 11.05.2022 SB2022051714
SB2022062302
SB2022081211
and 13 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720
CWE-444 Medium
No
No
- 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU61246 - Use After Free
CVE-2021-4083
CWE-416 Low
No
No
17.5.1 10.03.2022 SB2022031029
SB2022031033
SB2022031034
and 56 more
#VU57498 - Improper input validation
CVE-2021-22931
CWE-20 High
No
No
17.5.1.1 19.10.2021 SB2021101945
SB2022020113
SB2022031104
and 28 more
#VU56967 - Improper input validation
CVE-2021-3672
CWE-20 Medium
No
No
17.5.1.1 30.09.2021 SB2021093017
SB2021110508
SB2022031104
and 39 more
#VU55423 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-33037
CWE-444 Medium
No
No
- 29.07.2021 SB2021072907
SB2021080807
SB2021080808
and 30 more
#VU53229 - Memory corruption
CVE-2020-0591
CWE-119 Low
No
No
- 13.05.2021 SB2021051312
SB2020120234
#VU50404 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-27618
CWE-835 Medium
No
No
15.1.9, 16.1.5 04.01.2021 SB2021020709
SB2021020710
SB2021020711
and 31 more
#VU48942 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-27216
CWE-362 Low
No
No
- 23.10.2020 SB2020121307
SB2020121308
SB2021012011
and 27 more
#VU27230 - Improper input validation
CVE-2020-2756
CWE-20 Low
No
No
- 23.04.2020 SB2020042301
SB2020042302
SB2020042316
and 51 more
#VU27231 - Improper input validation
CVE-2020-2757
CWE-20 Low
No
No
- 23.04.2020 SB2020042301
SB2020042302
SB2020042316
and 50 more
#VU25002 - Session Fixation
CVE-2019-17563
CWE-384 Low
No
No
- 06.02.2020 SB2019121315
SB2020011492
SB2020011519
and 17 more


Showing elements 1 - 20 out of 55