CVE-2023-46748 F5 BIG-IP Configuration Utility
F5 BIG-IP Configuration utility contains an SQL injection vulnerability that may allow an authenticated attacker with network access through the BIG-IP management port and/or self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46747.
- CVSS
- not scored
On CISA’s exploited list
F5 BIG-IP Configuration Utility SQL Injection Vulnerability
- Added
- 2023-10-31
- Federal patch deadline
- 2023-11-21
- Ransomware use
- not known