← Database
CVE-2022-41622
HIGH
CVSS: 8.8
Published: 2022-12-07
Modified: 2026-06-17
Description
In all versions,
BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Affected Platforms
F5 Big-Ip Global Traffic ManagerF5 Big-Ip Local Traffic ManagerF5 Big-Ip Advanced Firewall ManagerF5 Big-Iq Centralized ManagementF5 Big-Ip Application Security ManagerF5 Big-Ip Access Policy ManagerF5 Big-Ip Domain Name SystemF5 Big-Ip Application Acceleration ManagerF5 Big-Ip AnalyticsF5 Big-Ip Link Controller
Weakness Type
CWE-352, CWE-352