CISA's list that day

31 October 2023

On CISA added 2 vulnerabilities to its list of exploited vulnerabilities, in F5 BIG-IP Configuration Utility. US federal agencies must fix them by .

Added that day

Added that day
VulnerabilityProductOur groupListedDeadlineEPSS
CVE-2023-46747Authentication BypassF5 BIG-IP Configuration UtilityPatch this weekRansomware use; Metasploit module; EPSS 0.970.97
CVE-2023-46748SQL InjectionF5 BIG-IP Configuration UtilityPatch soon0.04

Our record of CISA's changes begins on 24 January 2025. For earlier days this page lists the entries CISA dates to this day; changes CISA made that day are not known to us.