CVE-2022-31473: medium-severity vulnerability in F5 BIG-IP APM
BIG-IP APM Appliance mode vulnerability CVE-2022-31473
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.8epss 2.1%
In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated attacker may be able to bypass Appliance mode restrictions due to a directory traversal vulnerability in an undisclosed page within iApps. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Affected products
F5 · BIG-IP APMRelated CVEs — F5 BIG-IP APM
In the same product, most dangerous first.
CVE-2019-6609—CVE-2019-6609EPSS 1.5%CVE-2022-27634MEDIUMCVE-2022-27634EPSS 1.4%CVE-2022-27181MEDIUMCVE-2022-27181EPSS 0.9%CVE-2019-19150—CVE-2019-19150EPSS 0.8%CVE-2022-35245HIGHBIG-IP APM access policy vulnerability CVE-2022-35245EPSS 0.8%CVE-2022-33203HIGHBIG-IP APM and F5 SSL Orchestrator vulnerability CVE-2022-33203EPSS 0.8%