CVE-2022-41622

Description

In all versions, BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

References

https://github.com/Live-Hack-CVE/CVE-2022-41622

https://support.f5.com/csp/article/K94221585

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-44813

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS