An improper sanitization vulnerability exists in the BIG-IP QKView utility that allows a low-privileged attacker to read sensitive information from a QKView file. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://my.f5.com/manage/s/article/K000157895 Mitigation, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.1 · f5NVD modified 2026-10-26 17:10
Affected (CPE criteria) 22
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_application_visibility_and_reporting:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_automation_toolchain:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_carrier-grade_nat:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_container_ingress_services:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_websafe:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-iq_centralized_management:8.4.0:*:*:*:*:*:*:*
References 1
- https://my.f5.com/manage/s/article/K000157895 Mitigation, Vendor Advisory