F5 security advisories, May 2022

Every F5 security advisory published in May 2022, from F5 SIRT ([email protected] CNA) via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 43
Critical: 1
High: 17
In CISA KEV: 1
CVEs: 43

F5 advisories published in May 2022

May 5, 2022
Critical [CVE-2022-1388] On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x…
Critical9.8ExploitedCISA KEV
May 5, 2022
High [CVE-2022-29491] On F5 BIG-IP LTM, Advanced WAF, ASM, or APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions…
High7.5
May 5, 2022
High [CVE-2022-29263] On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x…
High7.8
May 5, 2022
High [CVE-2022-28716] BIG-IP: On 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions…
High7.5
May 5, 2022
High [CVE-2022-28714] On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x…
High7.3
May 5, 2022
High [CVE-2022-28707] On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, and 14.1.x versions prior to 14.1.4.6, a…
High8.0
May 5, 2022
High [CVE-2022-28705] On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x…
High7.5
May 5, 2022
High [CVE-2022-28701] On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, when the stream profile is configured on a virtual server, undisclosed requests
High7.5
May 5, 2022
High [CVE-2022-28695] On F5 BIG-IP AFM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and…
High7.2
May 5, 2022
High [CVE-2022-28691] On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and 13.1.x…
High7.5
May 5, 2022
High [CVE-2022-27806] On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP…
High8.7
May 5, 2022
High [CVE-2022-27230] On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP APM, and F5 BIG-IP Guided Configuration (GC)…
High7.5
May 5, 2022
High [CVE-2022-27189] On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x…
High7.5
May 5, 2022
High [CVE-2022-26890] On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prior to 16.1.2.1, 15.1.x versions prior to 15.1.5, 14.1.x versions…
High7.5
May 5, 2022
High [CVE-2022-26415] On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x…
High7.7
May 5, 2022
High [CVE-2022-26372] On F5 BIG-IP 15.1.x versions prior to 15.1.0.2, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all…
High7.5
May 5, 2022
High [CVE-2022-26071] On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x…
High7.4
May 5, 2022
High [CVE-2022-25946] On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP…
High8.7
May 5, 2022
Medium [CVE-2022-29480] On F5 BIG-IP 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x
Medium5.3
May 5, 2022
Medium [CVE-2022-29479] On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all…
Medium5.3
May 5, 2022
Medium [CVE-2022-29474] On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x…
Medium4.3
May 5, 2022
Medium [CVE-2022-29473] On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5
Medium5.9
May 5, 2022
Medium [CVE-2022-28859] On F5 BIG-IP 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6
Medium6.5
May 5, 2022
Medium [CVE-2022-28708] On F5 BIG-IP 16.1.x versions prior to 16.1.2.2 and 15.1.x versions prior to 15.1.5.1
Medium5.9
May 5, 2022
Medium [CVE-2022-28706] On F5 BIG-IP 16.1.x versions prior to 16.1.2 and 15.1.x versions prior to 15.1.5.1
Medium5.9
May 5, 2022
Medium [CVE-2022-27880] On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35, a stored Cross-Site Scripting (XSS)…
Medium4.8
May 5, 2022
Medium [CVE-2022-27878] On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP, and F5 BIG-IP Guided Configuration (GC) all…
Medium6.8
May 5, 2022
Medium [CVE-2022-27875] On F5 Access for Android 3.x versions prior to 3.0.8, a Task Hijacking vulnerability exists in the F5 Access for Android…
Medium5.5
May 5, 2022
Medium [CVE-2022-27662] On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35, a stored Cross-Site Template Injection…
Medium4.8
May 5, 2022
Medium [CVE-2022-27659] On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, and 14.1.x versions prior to 14.1.4.6, an…
Medium4.3
May 5, 2022
Medium [CVE-2022-27636] On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x…
Medium5.5
May 5, 2022
Medium [CVE-2022-27634] On 16.1.x versions prior to 16.1.2.2 and 15.1.x versions prior to 15.1.5.1, BIG-IP APM does not properly validate…
Medium6.5
May 5, 2022
Medium [CVE-2022-27495] On all versions 1.3.x (fixed in 1.4.0) NGINX Service Mesh control plane endpoints are exposed to the cluster overlay network
Medium6.5
May 5, 2022
Medium [CVE-2022-27182] On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, and 14.1.x versions prior to 14.1.4.6
Medium5.3
May 5, 2022
Medium [CVE-2022-27181] On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x…
Medium5.3
May 5, 2022
Medium [CVE-2022-26835] On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x…
Medium4.9
May 5, 2022
Medium [CVE-2022-26517] On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5
Medium5.9
May 5, 2022
Medium [CVE-2022-26370] On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, and 14.1.x versions prior to 14.1.4.6
Medium5.9
May 5, 2022
Medium [CVE-2022-26340] On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x…
Medium4.9
May 5, 2022
Medium [CVE-2022-26130] On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x…
Medium5.3
May 5, 2022
Medium [CVE-2022-25990] F5OS: On 1.0.x versions prior to 1.0.1, systems running F5OS-A software may expose certain registry ports externally.
Medium5.3
May 5, 2022
Medium [CVE-2022-1468] On all versions of 17.0.x, 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x on F5 BIG-IP, an authenticated iControl REST user…
Medium4.3
May 5, 2022
Low [CVE-2022-1389] On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP (fixed in 17.0.0), a cross-site request…
Low3.1

Get an email when F5 publishes the next one.

See F5's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about F5

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.