Known vulnerabilities in BIG-IP 16.1.2.2 - page 7

Software: BIG-IP
Version: 16.1.2.2
Software CPE: cpe:2.3:h:f5_networks:big-ip:*:*:*:*:*:*:*:*
Total vulnerabilities: 170
Public exploits: 13
Known exploited (KEV): 4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BIG-IP version 16.1.2.2 BIG-IP 16.1.2.2 is affected by 170 vulnerabilities: 2 critical, 7 high, 101 medium, 60 low Critical High Medium Low

Vulnerabilities (170)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96042 - Exposure of sensitive information to an unauthorized actor
CVE-2024-41723
CWE-200 Low
No
No
16.1.5, 17.1.1 15.08.2024 SB2024081524
#VU96040 - NULL Pointer Dereference
CVE-2024-41164
CWE-476 Medium
No
No
15.1.10, 16.1.5, 17.1.1 15.08.2024 SB2024081522
#VU96038 - Resource exhaustion
CVE-2024-41727
CWE-400 Medium
No
No
16.1.5 15.08.2024 SB2024081521
#VU96035 - Improper input validation
CVE-2024-39778
CWE-20 Medium
No
No
16.1.5, 17.1.1 15.08.2024 SB2024081518
#VU93544 - Improper input validation
CVE-2024-38477
CWE-20 Medium
No
No
- 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 58 more
#VU89273 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-31156
CWE-79 Low
No
No
15.1.10.4, 16.1.4.3, 17.1.1.3 09.05.2024 SB2024050901
#VU85014 - Resource exhaustion
CVE-2023-40542
CWE-400 Medium
No
No
15.1.9, 16.1.4 05.01.2024 SB2023101198
#VU82544 - Authentication Bypass Using an Alternate Path or Channel
CVE-2023-46747
CWE-288 High
Public exploit available
Exploited
13.1.5.1 + hotfix-bigip-13.1.5.1.0.20.2-eng3, 14.1.5.6 + hotfix-bigip-14.1.5.6.0.10.6-eng3, 15.1.10.2 + hotfix-bigip-15.1.10.2.0.44.2-eng3, 16.1.4.1 + hotfix-bigip-16.1.4.1.0.50.5-eng3, 17.1.0.3 + hotfix-bigip-17.1.0.3.0.75.4-eng3 27.10.2023 SB2023102726
SB2024080142
#VU78885 - Improper input validation
CVE-2023-38419
CWE-20 Medium
No
No
14.1.5.5, 15.1.9.1, 16.1.3.5, 17.1.0.2 02.08.2023 SB2023080285
#VU76651 - Resource Management Errors
CVE-2023-2650
CWE-399 Medium
No
No
- 30.05.2023 SB2023053040
SB2023053044
SB2023053045
and 131 more
#VU72167 - Out-of-bounds write
CVE-2023-0568
CWE-787 Medium
No
No
- 14.02.2023 SB2023021417
SB2023021526
SB2023022245
and 27 more
#VU71878 - Incorrect Permission Assignment for Critical Resource
CVE-2023-22326
CWE-732 Low
No
No
14.1.5.3, 15.1.8.1, 16.1.3.3, 17.0.0.2 06.02.2023 SB2023020665
#VU71877 - Use of Externally-Controlled Format String
CVE-2023-22374
CWE-134 Medium
No
No
- 06.02.2023 SB2023020664
#VU67532 - Use After Free
CVE-2022-40674
CWE-416 High
No
No
- 21.09.2022 SB2022092118
SB2022092119
SB2022092317
and 111 more
#VU64063 - Out-of-bounds write
CVE-2022-28734
CWE-787 Medium
No
No
- 08.06.2022 SB2022060810
SB2022061540
SB2022061566
and 36 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720
CWE-444 Medium
No
No
- 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU27230 - Improper input validation
CVE-2020-2756
CWE-20 Low
No
No
- 23.04.2020 SB2020042301
SB2020042302
SB2020042316
and 51 more
#VU27231 - Improper input validation
CVE-2020-2757
CWE-20 Low
No
No
- 23.04.2020 SB2020042301
SB2020042302
SB2020042316
and 50 more
#VU16727 - Use After Free
CVE-2018-1000878
CWE-416 Low
No
No
- 27.12.2018 SB2018122014
SB2018122801
SB2019041207
and 14 more
#VU14322 - Permissions, Privileges, and Access Controls
CVE-2018-2952
CWE-264 Low
No
No
- 13.08.2018 SB2018080913
SB2018081307
SB2018082404
and 19 more


Showing elements 121 - 140 out of 170