BIG-IP Configuration utility vulnerabilities
4 known CVE vulnerabilities in BIG-IP Configuration utility, translated and rated.
- CVE-2023-46748HighActively exploited
An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility. It may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or self IP addresses to execute arbitrary system commands.
- CVE-2026-40703Medium
A cross-site request forgery (CSRF) vulnerability exists in the dashboard of the BIG-IP Configuration utility. This affects software versions that have not reached End of Technical Support (EoTS).
- CVE-2023-38423Medium
CVE-2023-38423 describes a cross-site scripting (XSS) vulnerability in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user.
- CVE-2023-38138High
A reflected XSS vulnerability exists in the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS