CVE-2022-28695: F5 BIG-IP Advanced Firewall Manager

High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days.

On F5 BIG-IP AFM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, an authenticated attacker with high privileges can upload a maliciously crafted file to the BIG-IP AFM Configuration utility, which allows an attacker to run arbitrary commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Affected products

• F5 BIG-IP Advanced Firewall Manager: version 13.1.0 only; version 13.1.1 only; version 13.1.3 only; version 13.1.4 only; version 13.1.5 only; version 14.1.0 only; …

Published 2022-05-05. Last modified 2026-06-17.