F5 BIG-IP Guided Configuration vulnerabilities

6 CVEs affecting F5 BIG-IP Guided Configuration, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-39447, published 2023-10-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-27806, published 2022-05-05. High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days. On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, when running in…
CVE-2022-27878, published 2022-05-05. Medium severity, CVSS 6.8. EPSS: 0.8% chance of exploitation in the next 30 days. On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, a stored cross-site scripting (XSS)…
CVE-2021-23046, published 2021-09-14. Medium severity, CVSS 4.9. EPSS: 0.8% chance of exploitation in the next 30 days. On all versions of Guided Configuration before 8.0.0, when a configuration that contains secure properties is created and deployed from Access Guided Configuration (AGC), secure properties are logged…
CVE-2022-27230, published 2022-05-05. Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days. On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP APM, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, a reflected cross-site scripting (XSS)…
CVE-2022-25946, published 2022-05-05. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF, ASM, and ASM, and F5 BIG-IP Guided Configuration (GC) all versions prior to 9.0, when running in…
CVE-2023-39447, published 2023-10-10. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. When BIG-IP APM Guided Configurations are configured, undisclosed sensitive information may be logged in restnoded log. Note: Software versions which have reached End of Technical Support (EoTS)…