Security Advisory

CVE-2022-28695

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-05-05 16:34:25

Last updated 2024-09-17 02:31:19

Assigner f5

CVSS score 7.2

State PUBLISHED

Description

On F5 BIG-IP AFM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, an authenticated attacker with high privileges can upload a maliciously crafted file to the BIG-IP AFM Configuration utility, which allows an attacker to run arbitrary commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

← Browse all CVEs View on cve.org ↗