Cross-Site Request Forgery

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. iControl SOAP vulnerabilityCVE-2022-41622F5 · CVSS 8.8 · 92% likely

   CWE-352

2. Web Management Console Cross-site request forgery (CSRF) vulnerability in the web management console in F5 BIG-IP 9.4.3 allows remote attackers to hijack the authentication of adm…CVE-2008-7032F5 · 2.4% likely

   CWE-352

3. A cross-site request forgery (CSRF) vulnerability in the APM webtop 11.2.1 or greater may allow attacker to force an APM webtop session to log out and require re-authentication.CVE-2018-15334F5 Networks, Inc. · 0.7% likely

   CWE-352

4. In BIG-IP versions 15.0.0-15.1.0.4, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, iControl REST does not implement Cross Site Request Forgery protections…CVE-2020-5922F5 · 0.6% likely

   CWE-352

5. In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, a cross-site request forgery (CSRF) vulnerability in the Traffic Management User Interface (…CVE-2020-5904F5 · 0.6% likely

   CWE-352

6. BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x and all versions of BIG-IQ 8.x,…CVE-2021-23026F5 · 0.5% likely

   CWE-352

7. On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3 and NGINX App Protect on all versions before 3.5.0, when a cross-site request forgery…CVE-2021-23050F5 · 0.5% likely

   CWE-352

8. In versions 3.0.0-3.4.0, 2.0.0-2.9.0, and 1.0.1, there is insufficient cross-site request forgery (CSRF) protections for the NGINX Controller user interface.CVE-2020-5900F5 · 0.5% likely

   CWE-352

9. On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP (fixed in 17.0.0), a cross-site request forgery (CSRF) vulnerability exists in an undisclosed pa…CVE-2022-1389F5 · CVSS 3.1 · 0.3% likely

   CWE-352

10. In versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, BIG-IP ASM Configuration utility CSRF protection token can be…CVE-2020-5928F5 · 0.2% likely

    CWE-352

11. BIG-IP Configuration utility CSRF vulnerabilityCVE-2026-40703F5 · CVSS 5.4 · 0.1% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.