CVEs published in October 2022
23 tracked CVEs from 5 vendors had their first vendor advisory published in October 2022: 2 critical, 13 high, 1 in CISA KEV. Newest first.
- Added
CVE-2022-40674Critical
libexpat Vulnerability in NetApp Products
NetApp · 1 advisory - Added
On specific hardware platforms, on BIG-IP versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all…
F5 · 1 advisory - Added
CVE-2022-41836High
When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests
F5 · 1 advisory - Added
CVE-2022-41835High
In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.5.0, excessive file permissions in F5OS
F5 · 1 advisory - Added
CVE-2022-41833High
In all BIG-IP 13.1.x versions
F5 · 1 advisory - Added
CVE-2022-41832High
In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x…
F5 · 1 advisory - Added
CVE-2022-41813Medium
BIG-IP: In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x
F5 · 1 advisory - Added
CVE-2022-41806High
BIG-IP: In versions 16.1.x before 16.1.3.2 and 15.1.x before 15.1.5.1
F5 · 1 advisory - Added
CVE-2022-41787High
In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x…
F5 · 1 advisory - Added
CVE-2022-41780Medium
In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.4.0, a directory traversal vulnerability exists in an…
F5 · 1 advisory - Added
CVE-2022-41770Medium
In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all…
F5 · 1 advisory - Added
CVE-2022-41743High
NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_hls_module that might
F5 · 1 advisory - Added
CVE-2022-41742High
NGINX Plus: NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX…
F5 · 1 advisory - Added
CVE-2022-41741High
NGINX Plus: NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX…
F5 · 1 advisory - Added
CVE-2022-41694Medium
In BIG-IP versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, and BIG-IQ…
F5 · 1 advisory - Added
CVE-2022-41691High
When a BIG-IP Advanced WAF/ASM security policy is configured on a virtual server, undisclosed requests
F5 · 1 advisory - Added
CVE-2022-41624High
In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.2, 15.1.x before 15.1.7, 14.1.x before 14.1.5.2, and 13.1.x…
F5 · 1 advisory - Added
CVE-2022-41617High
BIG-IP: In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1
F5 · 1 advisory - Added
CVE-2022-36795Medium
In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, and 14.1.x before 14.1.5.1
F5 · 1 advisory - Added
CVE-2022-40684CriticalCISA KEV
Fortinet Multiple Products Authentication Bypass Vulnerability
Fortinet · 1 advisory - Added
CVE-2022-36803High
The MasterUserEdit API in Atlassian Jira Align Server before version 10.109.2
Atlassian · 1 advisory - Added
CVE-2022-36802Medium
The ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2
Atlassian · 1 advisory - Added
CVE-2022-42247Medium
pfSense: pfSense v2.5.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the browser.php component.
pfSense · 1 advisory