Threat database

CVE-2022-1388 is a high-severity vulnerability in F5 BIG-IP that involves missing authentication in a critical function. This flaw allows remote attackers to execute arbitrary code, create or delete files, or disable services on affected systems. The vulnerability has been exploited in the wild and is known to be used in ransomware campaigns.

CVE-2021-22991 is a buffer overflow vulnerability in the Traffic Management Microkernel component of F5 BIG-IP ASM Risk Engine. This flaw allows attackers to bypass URL-based access controls. The vulnerability has been exploited in the wild, indicating active threat activity. No specific affected versions or patch information is provided in the available data.

CVE-2020-5902 is a remote code execution vulnerability in the F5 BIG-IP Traffic Management User Interface (TMUI). It affects undisclosed pages within the TMUI and has been exploited in the wild, including use in ransomware campaigns. The vulnerability is classified as high severity.

CVE-2021-22986 is a remote code execution vulnerability in the iControl REST interface of F5 BIG-IP and BIG-IQ Centralized Management. It allows unauthenticated attackers with network access to execute system commands, manipulate files, and disable services. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. No specific affected versions or patch information is provided in the input data.