CVE-2023-46748
F5 BIG-IP Configuration Utility
F5 BIG-IP Configuration Utility SQL Injection Vulnerability
What it is
F5 BIG-IP Configuration utility contains an SQL injection vulnerability that may allow an authenticated attacker with network access through the BIG-IP management port and/or self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46747.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other F5 entries on the list
- BIG-IP APM F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability CVE-2026-94127 · Sep 22, 2026
- BIG-IP F5 BIG-IP Stack-Based Buffer Overflow Vulnerability CVE-2025-53521 · Mar 27, 2026
- BIG-IP Configuration Utility F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability CVE-2023-46747 · Oct 31, 2023
- BIG-IP F5 BIG-IP Missing Authentication Vulnerability CVE-2022-1388 · May 10, 2022
- BIG-IP Traffic Management Microkernel F5 BIG-IP Traffic Management Microkernel Buffer Overflow CVE-2021-22991 · Jan 18, 2022
- BIG-IP and BIG-IQ Centralized Management F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability CVE-2021-22986 · Nov 3, 2021