Live › vulnerability › CVE-2023-46748
Go to dashboardF5 BIG-IP Configuration Utility has an SQL injection flaw that lets an authenticated attacker with network access to the management port or self IPs run system commands. CISA lists it as actively exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| F5 BIG-IP Configuration Utility | vendor | – | – |
| f5 big-ip access policy manager | vendor | >= 13.1.0, <= 13.1.5 | – |
| f5 big-ip access policy manager | vendor | >= 14.1.0, <= 14.1.5 | – |
| f5 big-ip access policy manager | vendor | >= 15.1.0, <= 15.1.10 | – |
| f5 big-ip access policy manager | vendor | >= 16.1.0, <= 16.1.4 | – |
| f5 big-ip access policy manager | vendor | >= 17.1.0, <= 17.1.1 | – |
| f5 big-ip advanced firewall manager | vendor | >= 13.1.0, <= 13.1.5 | – |
| f5 big-ip advanced firewall manager | vendor | >= 14.1.0, <= 14.1.5 | – |
| f5 big-ip advanced firewall manager | vendor | >= 15.1.0, <= 15.1.10 | – |
| f5 big-ip advanced firewall manager | vendor | >= 16.1.0, <= 16.1.4 | – |
| f5 big-ip advanced firewall manager | vendor | >= 17.1.0, <= 17.1.1 | – |
| f5 big-ip carrier-grade nat | vendor | >= 13.1.0, <= 13.1.5 | – |
| f5 big-ip carrier-grade nat | vendor | >= 14.1.0, <= 14.1.5 | – |
| f5 big-ip carrier-grade nat | vendor | >= 15.1.0, <= 15.1.10 | – |
| f5 big-ip carrier-grade nat | vendor | >= 16.1.0, <= 16.1.4 | – |
| f5 big-ip carrier-grade nat | vendor | >= 17.1.0, <= 17.1.1 | – |
| f5 big-ip ddos hybrid defender | vendor | >= 13.1.0, <= 13.1.5 | – |
| f5 big-ip ddos hybrid defender | vendor | >= 14.1.0, <= 14.1.5 | – |
| f5 big-ip ddos hybrid defender | vendor | >= 15.1.0, <= 15.1.10 | – |
| f5 big-ip ddos hybrid defender | vendor | >= 16.1.0, <= 16.1.4 | – |
| f5 big-ip ddos hybrid defender | vendor | >= 17.1.0, <= 17.1.1 | – |
| f5 big-ip ssl orchestrator | vendor | >= 13.1.0, <= 13.1.5 | – |
| f5 big-ip ssl orchestrator | vendor | >= 14.1.0, <= 14.1.5 | – |
| f5 big-ip ssl orchestrator | vendor | >= 15.1.0, <= 15.1.10 | – |
| f5 big-ip ssl orchestrator | vendor | >= 16.1.0, <= 16.1.4 | – |
| f5 big-ip ssl orchestrator | vendor | >= 17.1.0, <= 17.1.1 | – |
| f5 big-ip local traffic manager | vendor | >= 13.1.0, <= 13.1.5 | – |
| f5 big-ip local traffic manager | vendor | >= 14.1.0, <= 14.1.5 | – |
| f5 big-ip local traffic manager | vendor | >= 15.1.0, <= 15.1.10 | – |
| f5 big-ip local traffic manager | vendor | >= 16.1.0, <= 16.1.4 | – |
| f5 big-ip local traffic manager | vendor | >= 17.1.0, <= 17.1.1 | – |
| f5 big-ip policy enforcement manager | vendor | >= 13.1.0, <= 13.1.5 | – |
| f5 big-ip policy enforcement manager | vendor | >= 14.1.0, <= 14.1.5 | – |
| f5 big-ip policy enforcement manager | vendor | >= 15.1.0, <= 15.1.10 | – |
| f5 big-ip policy enforcement manager | vendor | >= 16.1.0, <= 16.1.4 | – |
| f5 big-ip policy enforcement manager | vendor | >= 17.1.0, <= 17.1.1 | – |
| f5 big-ip automation toolchain | vendor | >= 13.1.0, <= 13.1.5 | – |
| f5 big-ip automation toolchain | vendor | >= 14.1.0, <= 14.1.5 | – |
| f5 big-ip automation toolchain | vendor | >= 15.1.0, <= 15.1.10 | – |
| f5 big-ip automation toolchain | vendor | >= 16.1.0, <= 16.1.4 | – |
| f5 big-ip automation toolchain | vendor | >= 17.1.0, <= 17.1.1 | – |
Unknown from the sources.
Apply the mitigations from the vendor (F5) instructions, or stop using the product if mitigations are unavailable, as CISA requires.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
F5 BIG-IP Configuration utility contains an SQL injection vulnerability that may allow an authenticated attacker with network access through the BIG-IP management port and/or self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46747.
CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2023-46748")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.