# BIG-IP.

Every CVE that names BIG-IP among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Time-of-check time-of-use race condition in BIG-IP](https://agentprime.io/advisories/CVE-2022-23029.md)
  `CVE-2022-23029` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 25 Jan 2022 · Tags: Race condition
- [Uncontrolled resource consumption in BIG-IP](https://agentprime.io/advisories/CVE-2022-23030.md)
  `CVE-2022-23030` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 25 Jan 2022 · Tags: Denial of service
- [Incorrect comparison in BIG-IP](https://agentprime.io/advisories/CVE-2022-23027.md)
  `CVE-2022-23027` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 25 Jan 2022 · Tags: CWE-697
- [NULL pointer dereference in BIG-IP](https://agentprime.io/advisories/CVE-2022-23021.md)
  `CVE-2022-23021` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 25 Jan 2022 · Tags: Memory corruption
- [Improper input validation in BIG-IP](https://agentprime.io/advisories/CVE-2022-23019.md)
  `CVE-2022-23019` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 25 Jan 2022 · Tags: CWE-20
- [NULL pointer dereference in BIG-IP](https://agentprime.io/advisories/CVE-2022-23020.md)
  `CVE-2022-23020` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 25 Jan 2022 · Tags: Memory corruption
- [NULL pointer dereference in BIG-IP](https://agentprime.io/advisories/CVE-2022-23025.md)
  `CVE-2022-23025` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 25 Jan 2022 · Tags: Memory corruption
- [NULL pointer dereference in BIG-IP](https://agentprime.io/advisories/CVE-2022-23022.md)
  `CVE-2022-23022` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 25 Jan 2022 · Tags: Memory corruption
- [NULL pointer dereference in BIG-IP](https://agentprime.io/advisories/CVE-2022-23017.md)
  `CVE-2022-23017` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 25 Jan 2022 · Tags: Memory corruption
- [Double free in BIG-IP](https://agentprime.io/advisories/CVE-2022-23012.md)
  `CVE-2022-23012` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 25 Jan 2022 · Tags: Memory corruption
- [NULL pointer dereference in BIG-IP](https://agentprime.io/advisories/CVE-2022-23016.md)
  `CVE-2022-23016` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 25 Jan 2022 · Tags: Memory corruption
- [Uncontrolled resource consumption in BIG-IP](https://agentprime.io/advisories/CVE-2022-23015.md)
  `CVE-2022-23015` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 25 Jan 2022 · Tags: Denial of service
- [Incorrect calculation in BIG-IP](https://agentprime.io/advisories/CVE-2022-23011.md)
  `CVE-2022-23011` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 25 Jan 2022 · Tags: CWE-682
- [Improper resource shutdown in BIG-IP](https://agentprime.io/advisories/CVE-2022-23010.md)
  `CVE-2022-23010` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 25 Jan 2022 · Tags: Denial of service
- [Cross-site scripting in BIG-IP](https://agentprime.io/advisories/CVE-2021-23027.md)
  `CVE-2021-23027` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 14 Sept 2021 · Tags: Cross-site scripting (XSS)
- [OS command injection in BIG-IP](https://agentprime.io/advisories/CVE-2021-23025.md)
  `CVE-2021-23025` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 14 Sept 2021 · Tags: Command injection
- [Improper input validation in BIG-IP](https://agentprime.io/advisories/CVE-2021-23034.md)
  `CVE-2021-23034` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 14 Sept 2021 · Tags: CWE-20
- [Cross-site scripting in BIG-IP](https://agentprime.io/advisories/CVE-2021-23037.md)
  `CVE-2021-23037` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 14 Sept 2021 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in BIG-IP](https://agentprime.io/advisories/CVE-2021-23038.md)
  `CVE-2021-23038` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 14 Sept 2021 · Tags: Cross-site scripting (XSS)
- [Improper input validation in BIG-IP](https://agentprime.io/advisories/CVE-2021-23035.md)
  `CVE-2021-23035` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 14 Sept 2021 · Tags: CWE-20
- [Improper input validation in BIG-IP](https://agentprime.io/advisories/CVE-2021-23039.md)
  `CVE-2021-23039` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 14 Sept 2021 · Tags: CWE-20
- [Improper input validation in BIG-IP](https://agentprime.io/advisories/CVE-2021-23045.md)
  `CVE-2021-23045` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 14 Sept 2021 · Tags: CWE-20
- [Improper input validation in BIG-IP](https://agentprime.io/advisories/CVE-2021-23044.md)
  `CVE-2021-23044` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 14 Sept 2021 · Tags: CWE-20
- [Uncontrolled resource consumption in BIG-IP](https://agentprime.io/advisories/CVE-2021-23042.md)
  `CVE-2021-23042` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 14 Sept 2021 · Tags: Denial of service
- [Path traversal in BIG-IP](https://agentprime.io/advisories/CVE-2021-23043.md)
  `CVE-2021-23043` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 14 Sept 2021 · Tags: Path traversal
- [Cross-site scripting in BIG-IP](https://agentprime.io/advisories/CVE-2021-23041.md)
  `CVE-2021-23041` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 14 Sept 2021 · Tags: Cross-site scripting (XSS)
- [Uncontrolled resource consumption in BIG-IP](https://agentprime.io/advisories/CVE-2021-23049.md)
  `CVE-2021-23049` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 14 Sept 2021 · Tags: Denial of service
- [Improper input validation in BIG-IP](https://agentprime.io/advisories/CVE-2021-23048.md)
  `CVE-2021-23048` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 14 Sept 2021 · Tags: CWE-20
- [Improper input validation in BIG-IP](https://agentprime.io/advisories/CVE-2021-23051.md)
  `CVE-2021-23051` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 14 Sept 2021 · Tags: CWE-20
- [BIG-IP: On BIG-IP 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.0.8 through 13.1.3.6…](https://agentprime.io/advisories/CVE-2021-23015.md)
  `CVE-2021-23015` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 10 May 2021
- [BIG-IP: On BIG-IP version 16.0.x before 16.0.1.1 and 15.1.x before 15.1.3…](https://agentprime.io/advisories/CVE-2021-23009.md)
  `CVE-2021-23009` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 10 May 2021
- [BIG-IP: On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4…](https://agentprime.io/advisories/CVE-2021-23012.md)
  `CVE-2021-23012` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 10 May 2021
- [BIG-IP: On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4…](https://agentprime.io/advisories/CVE-2021-23013.md)
  `CVE-2021-23013` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 10 May 2021
- [BIG-IP: On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4…](https://agentprime.io/advisories/CVE-2021-23011.md)
  `CVE-2021-23011` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 10 May 2021
- [BIG-IP: On BIG-IP versions 14.1.4 and 16.0.1.1…](https://agentprime.io/advisories/CVE-2021-23007.md)
  `CVE-2021-23007` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 31 Mar 2021
- [BIG-IP: On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1…](https://agentprime.io/advisories/CVE-2021-23004.md)
  `CVE-2021-23004` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 31 Mar 2021
- [BIG-IP: On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4…](https://agentprime.io/advisories/CVE-2021-22998.md)
  `CVE-2021-22998` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 31 Mar 2021
- [BIG-IP: On versions 15.0.x before 15.1.0 and 14.1.x before 14.1.4…](https://agentprime.io/advisories/CVE-2021-22999.md)
  `CVE-2021-22999` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 31 Mar 2021
- [BIG-IP: On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1…](https://agentprime.io/advisories/CVE-2021-23003.md)
  `CVE-2021-23003` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 31 Mar 2021
- [BIG-IP: On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2…](https://agentprime.io/advisories/CVE-2021-23000.md)
  `CVE-2021-23000` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 31 Mar 2021
- [BIG-IP: On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4…](https://agentprime.io/advisories/CVE-2021-22994.md)
  `CVE-2021-22994` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 31 Mar 2021
- [Buffer overflow in BIG-IP](https://agentprime.io/advisories/CVE-2021-22991.md)
  `CVE-2021-22991` · CVE record: BIG-IP · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.62 · Not analysed yet · Published 31 Mar 2021 · Tags: Memory corruption
- [BIG-IP: On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4…](https://agentprime.io/advisories/CVE-2021-22988.md)
  `CVE-2021-22988` · CVE record: BIG-IP · No CVSS score · EPSS 0.10 · Not analysed yet · Published 31 Mar 2021
- [BIG-IP: On BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3…](https://agentprime.io/advisories/CVE-2021-22977.md)
  `CVE-2021-22977` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 12 Feb 2021
- [BIG-IP: On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.3.1…](https://agentprime.io/advisories/CVE-2021-22978.md)
  `CVE-2021-22978` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 12 Feb 2021
- [BIG-IP: On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.2.8…](https://agentprime.io/advisories/CVE-2021-22979.md)
  `CVE-2021-22979` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 12 Feb 2021
- [BIG-IP: On all versions of BIG-IP 12.1.x and 11.6.x…](https://agentprime.io/advisories/CVE-2021-22981.md)
  `CVE-2021-22981` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 12 Feb 2021
- [BIG-IP: On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1…](https://agentprime.io/advisories/CVE-2021-22973.md)
  `CVE-2021-22973` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 12 Feb 2021
- [BIG-IP: On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1…](https://agentprime.io/advisories/CVE-2021-22975.md)
  `CVE-2021-22975` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 12 Feb 2021
- [BIG-IP: On BIG-IP 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3…](https://agentprime.io/advisories/CVE-2020-27719.md)
  `CVE-2020-27719` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 24 Dec 2020
- [BIG-IP: On BIG-IP 15.1.0-15.1.0.5 and 14.1.0-14.1.3…](https://agentprime.io/advisories/CVE-2020-27715.md)
  `CVE-2020-27715` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 24 Dec 2020
- [BIG-IP: On BIG-IP version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.4…](https://agentprime.io/advisories/CVE-2020-27727.md)
  `CVE-2020-27727` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 24 Dec 2020
- [BIG-IP: On BIG-IP versions 14.0.0-14.0.1 and 13.1.0-13.1.3.4…](https://agentprime.io/advisories/CVE-2020-5949.md)
  `CVE-2020-5949` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 11 Dec 2020
- [BIG-IP: In certain configurations on version 13.1.3.4…](https://agentprime.io/advisories/CVE-2020-27713.md)
  `CVE-2020-27713` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 11 Dec 2020
- [BIG-IP: On BIG-IP 14.1.0-14.1.2.6, undisclosed endpoints in iControl REST allow for a reflected…](https://agentprime.io/advisories/CVE-2020-5950.md)
  `CVE-2020-5950` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 11 Dec 2020
- [BIG-IP: On BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4…](https://agentprime.io/advisories/CVE-2020-5948.md)
  `CVE-2020-5948` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 11 Dec 2020
- [BIG-IP: In versions 14.1.0-14.1.0.1 and 14.1.2.5-14.1.2.7…](https://agentprime.io/advisories/CVE-2020-5943.md)
  `CVE-2020-5943` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 5 Nov 2020
- [BIG-IP: In BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7…](https://agentprime.io/advisories/CVE-2020-5945.md)
  `CVE-2020-5945` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 5 Nov 2020
- [BIG-IP: In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.3…](https://agentprime.io/advisories/CVE-2020-5940.md)
  `CVE-2020-5940` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 5 Nov 2020
- [BIG-IP: On BIG-IP versions 16.0.0-16.0.0.1 and 15.1.0-15.1.0.5…](https://agentprime.io/advisories/CVE-2020-5941.md)
  `CVE-2020-5941` · CVE record: BIG-IP · No CVSS score · Not analysed yet · Published 5 Nov 2020

Older: <https://agentprime.io/advisories/technology/big-ip.md?cursor=WyIyMDIwLTExLTA1VDE5OjE4OjE4LjAwMDAwMFoiLCJDVkUtMjAyMC01OTQxIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=big-ip>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/big-ip/>. Everything for agents: <https://agentprime.io/llms.txt>.