All packages
BIG-IP Configuration utility vulnerabilities
3 known CVE vulnerabilities in BIG-IP Configuration utility, translated and rated.
- CVE-2026-40703Medium
A cross-site request forgery (CSRF) vulnerability exists in the dashboard of the BIG-IP Configuration utility. This affects software versions that have not reached End of Technical Support (EoTS).
- CVE-2023-38423Medium
CVE-2023-38423 describes a cross-site scripting (XSS) vulnerability in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user.
- CVE-2023-38138High
A reflected XSS vulnerability exists in the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user.