PatchTheCVECVE-2022-27662: On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35, a stored Cross-Site Templa
CVE-2022-27662 is a medium-severity flaw (CVSS 4.8) affecting traffix signaling delivery controller. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35, a stored Cross-Site Template Injection vulnerability exists in an undisclosed page of the Traffix SDC Configuration utility that allows an attacker to execute template language-specific instructions in the context of the server. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Why this priority
- No elevated risk signals yet
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 4.8 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | High |
| User interaction | Required |
| EPSS exploit chance | 0.5% (top 58%) |
| CISA exploited list | No |
| Weakness | CWE-1336 |
| Published | 2022-05-05 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-27662?
traffix signaling delivery controller: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2022-27662 being exploited?
CVE-2022-27662 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-27662 affect?
CVE-2022-27662 affects traffix signaling delivery controller. Severity is medium (CVSS 4.8). On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35, a stored Cross-Site Template Injection vulnerability exists in an undisclosed page of the Traffix SDC Configuration utility that allows an attacker to execu
How urgent is CVE-2022-27662?
Priority 27/100. No elevated risk signals yet.
Software pages
Related CVEs
- CVE-2019-5436 HIGH 7.8 UPGRADE MITIGATE A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versio
- CVE-2019-13565 HIGH 7.5 UPGRADE MITIGATE An issue was discovered in OpenLDAP 2.x before 2.4.48
- CVE-2022-27880 MEDIUM 4.8 DOWNGRADE On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35, a stored Cross-Site Script
- CVE-2019-9077 HIGH 7.8 DOWNGRADE MITIGATE An issue was discovered in GNU Binutils 2.32
- CVE-2019-9070 HIGH 7.8 DOWNGRADE MITIGATE An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32