F5 security advisories, October 2022

Every F5 security advisory published in October 2022, from F5 SIRT ([email protected] CNA) via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 18
Critical: 0
High: 12
In CISA KEV: 0
CVEs: 18

F5 advisories published in October 2022

Oct 19, 2022
High [CVE-2022-41836] When an 'Attack Signature False Positive Mode' enabled security policy is configured on a virtual server, undisclosed requests
High7.5
Oct 19, 2022
High [CVE-2022-41835] In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.5.0, excessive file permissions in F5OS
High7.3
Oct 19, 2022
High [CVE-2022-41833] In all BIG-IP 13.1.x versions
High7.5
Oct 19, 2022
High [CVE-2022-41832] In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x…
High7.5
Oct 19, 2022
High [CVE-2022-41806] BIG-IP: In versions 16.1.x before 16.1.3.2 and 15.1.x before 15.1.5.1
High7.5
Oct 19, 2022
High [CVE-2022-41787] In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x…
High7.5
Oct 19, 2022
High [CVE-2022-41743] NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_hls_module that might
High7.0
Oct 19, 2022
High [CVE-2022-41742] NGINX Plus: NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX…
High7.1
Oct 19, 2022
High [CVE-2022-41741] NGINX Plus: NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX…
High7.0
Oct 19, 2022
High [CVE-2022-41691] When a BIG-IP Advanced WAF/ASM security policy is configured on a virtual server, undisclosed requests
High7.5
Oct 19, 2022
High [CVE-2022-41624] In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.2, 15.1.x before 15.1.7, 14.1.x before 14.1.5.2, and 13.1.x…
High7.5
Oct 19, 2022
High [CVE-2022-41617] BIG-IP: In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x before 13.1.5.1
High7.2
Oct 19, 2022
Medium [CVE-2022-41813] BIG-IP: In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x
Medium6.5
Oct 19, 2022
Medium [CVE-2022-41780] In F5OS-A version 1.x before 1.1.0 and F5OS-C version 1.x before 1.4.0, a directory traversal vulnerability exists in an…
Medium5.5
Oct 19, 2022
Medium [CVE-2022-41770] In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all…
Medium6.5
Oct 19, 2022
Medium [CVE-2022-41694] In BIG-IP versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, and BIG-IQ…
Medium4.9
Oct 19, 2022
Medium [CVE-2022-36795] In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, and 14.1.x before 14.1.5.1
Medium5.3
Oct 19, 2022
Low [CVE-2022-41983] On specific hardware platforms, on BIG-IP versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all…
Low3.7

Get an email when F5 publishes the next one.

See F5's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about F5

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.