Advisories · Technology

BIG-IP.

Every CVE that names BIG-IP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-23029 CVE record

Time-of-check time-of-use race condition in BIG-IP
- BIG-IP
- Race condition
Not analysed yet 25 Jan 2022
CVE-2022-23030 CVE record

Uncontrolled resource consumption in BIG-IP
- BIG-IP
- Denial of service
Not analysed yet 25 Jan 2022
CVE-2022-23027 CVE record

Incorrect comparison in BIG-IP
- BIG-IP
- CWE-697
Not analysed yet 25 Jan 2022
CVE-2022-23021 CVE record

NULL pointer dereference in BIG-IP
- BIG-IP
- Memory corruption
Not analysed yet 25 Jan 2022
CVE-2022-23019 CVE record

Improper input validation in BIG-IP
- BIG-IP
- CWE-20
Not analysed yet 25 Jan 2022
CVE-2022-23020 CVE record

NULL pointer dereference in BIG-IP
- BIG-IP
- Memory corruption
Not analysed yet 25 Jan 2022
CVE-2022-23025 CVE record

NULL pointer dereference in BIG-IP
- BIG-IP
- Memory corruption
Not analysed yet 25 Jan 2022
CVE-2022-23022 CVE record

NULL pointer dereference in BIG-IP
- BIG-IP
- Memory corruption
Not analysed yet 25 Jan 2022
CVE-2022-23017 CVE record

NULL pointer dereference in BIG-IP
- BIG-IP
- Memory corruption
Not analysed yet 25 Jan 2022
CVE-2022-23012 CVE record

Double free in BIG-IP
- BIG-IP
- Memory corruption
Not analysed yet 25 Jan 2022
CVE-2022-23016 CVE record

NULL pointer dereference in BIG-IP
- BIG-IP
- Memory corruption
Not analysed yet 25 Jan 2022
CVE-2022-23015 CVE record

Uncontrolled resource consumption in BIG-IP
- BIG-IP
- Denial of service
Not analysed yet 25 Jan 2022
CVE-2022-23011 CVE record

Incorrect calculation in BIG-IP
- BIG-IP
- CWE-682
Not analysed yet 25 Jan 2022
CVE-2022-23010 CVE record

Improper resource shutdown in BIG-IP
- BIG-IP
- Denial of service
Not analysed yet 25 Jan 2022
CVE-2021-23027 CVE record

Cross-site scripting in BIG-IP
- BIG-IP
- Cross-site scripting (XSS)
Not analysed yet 14 Sept 2021
CVE-2021-23025 CVE record

OS command injection in BIG-IP
- BIG-IP
- Command injection
Not analysed yet 14 Sept 2021
CVE-2021-23034 CVE record

Improper input validation in BIG-IP
- BIG-IP
- CWE-20
Not analysed yet 14 Sept 2021
CVE-2021-23037 CVE record

Cross-site scripting in BIG-IP
- BIG-IP
- Cross-site scripting (XSS)
Not analysed yet 14 Sept 2021
CVE-2021-23038 CVE record

Cross-site scripting in BIG-IP
- BIG-IP
- Cross-site scripting (XSS)
Not analysed yet 14 Sept 2021
CVE-2021-23035 CVE record

Improper input validation in BIG-IP
- BIG-IP
- CWE-20
Not analysed yet 14 Sept 2021
CVE-2021-23039 CVE record

Improper input validation in BIG-IP
- BIG-IP
- CWE-20
Not analysed yet 14 Sept 2021
CVE-2021-23045 CVE record

Improper input validation in BIG-IP
- BIG-IP
- CWE-20
Not analysed yet 14 Sept 2021
CVE-2021-23044 CVE record

Improper input validation in BIG-IP
- BIG-IP
- CWE-20
Not analysed yet 14 Sept 2021
CVE-2021-23042 CVE record

Uncontrolled resource consumption in BIG-IP
- BIG-IP
- Denial of service
Not analysed yet 14 Sept 2021
CVE-2021-23043 CVE record

Path traversal in BIG-IP
- BIG-IP
- Path traversal
Not analysed yet 14 Sept 2021
CVE-2021-23041 CVE record

Cross-site scripting in BIG-IP
- BIG-IP
- Cross-site scripting (XSS)
Not analysed yet 14 Sept 2021
CVE-2021-23049 CVE record

Uncontrolled resource consumption in BIG-IP
- BIG-IP
- Denial of service
Not analysed yet 14 Sept 2021
CVE-2021-23048 CVE record

Improper input validation in BIG-IP
- BIG-IP
- CWE-20
Not analysed yet 14 Sept 2021
CVE-2021-23051 CVE record

Improper input validation in BIG-IP
- BIG-IP
- CWE-20
Not analysed yet 14 Sept 2021
CVE-2021-23015 CVE record

BIG-IP: On BIG-IP 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.0.8 through 13.1.3.6…
- BIG-IP
Not analysed yet 10 May 2021
CVE-2021-23009 CVE record

BIG-IP: On BIG-IP version 16.0.x before 16.0.1.1 and 15.1.x before 15.1.3…
- BIG-IP
Not analysed yet 10 May 2021
CVE-2021-23012 CVE record

BIG-IP: On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4…
- BIG-IP
Not analysed yet 10 May 2021
CVE-2021-23013 CVE record

BIG-IP: On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4…
- BIG-IP
Not analysed yet 10 May 2021
CVE-2021-23011 CVE record

BIG-IP: On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4…
- BIG-IP
Not analysed yet 10 May 2021
CVE-2021-23007 CVE record

BIG-IP: On BIG-IP versions 14.1.4 and 16.0.1.1…
- BIG-IP
Not analysed yet 31 Mar 2021
CVE-2021-23004 CVE record

BIG-IP: On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1…
- BIG-IP
Not analysed yet 31 Mar 2021
CVE-2021-22998 CVE record

BIG-IP: On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4…
- BIG-IP
Not analysed yet 31 Mar 2021
CVE-2021-22999 CVE record

BIG-IP: On versions 15.0.x before 15.1.0 and 14.1.x before 14.1.4…
- BIG-IP
Not analysed yet 31 Mar 2021
CVE-2021-23003 CVE record

BIG-IP: On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1…
- BIG-IP
Not analysed yet 31 Mar 2021
CVE-2021-23000 CVE record

BIG-IP: On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2…
- BIG-IP
Not analysed yet 31 Mar 2021
CVE-2021-22994 CVE record

BIG-IP: On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4…
- BIG-IP
Not analysed yet 31 Mar 2021
CVE-2021-22991 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Buffer overflow in BIG-IP
- BIG-IP
- Memory corruption
Not analysed yet 31 Mar 2021
CVE-2021-22988 CVE record

BIG-IP: On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4…
- BIG-IP
Not analysed yet 31 Mar 2021
CVE-2021-22977 CVE record

BIG-IP: On BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3…
- BIG-IP
Not analysed yet 12 Feb 2021
CVE-2021-22978 CVE record

BIG-IP: On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.3.1…
- BIG-IP
Not analysed yet 12 Feb 2021
CVE-2021-22979 CVE record

BIG-IP: On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.2.8…
- BIG-IP
Not analysed yet 12 Feb 2021
CVE-2021-22981 CVE record

BIG-IP: On all versions of BIG-IP 12.1.x and 11.6.x…
- BIG-IP
Not analysed yet 12 Feb 2021
CVE-2021-22973 CVE record

BIG-IP: On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1…
- BIG-IP
Not analysed yet 12 Feb 2021
CVE-2021-22975 CVE record

BIG-IP: On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1…
- BIG-IP
Not analysed yet 12 Feb 2021
CVE-2020-27719 CVE record

BIG-IP: On BIG-IP 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3…
- BIG-IP
Not analysed yet 24 Dec 2020
CVE-2020-27715 CVE record

BIG-IP: On BIG-IP 15.1.0-15.1.0.5 and 14.1.0-14.1.3…
- BIG-IP
Not analysed yet 24 Dec 2020
CVE-2020-27727 CVE record

BIG-IP: On BIG-IP version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.4…
- BIG-IP
Not analysed yet 24 Dec 2020
CVE-2020-5949 CVE record

BIG-IP: On BIG-IP versions 14.0.0-14.0.1 and 13.1.0-13.1.3.4…
- BIG-IP
Not analysed yet 11 Dec 2020
CVE-2020-27713 CVE record

BIG-IP: In certain configurations on version 13.1.3.4…
- BIG-IP
Not analysed yet 11 Dec 2020
CVE-2020-5950 CVE record

BIG-IP: On BIG-IP 14.1.0-14.1.2.6, undisclosed endpoints in iControl REST allow for a reflected…
- BIG-IP
Not analysed yet 11 Dec 2020
CVE-2020-5948 CVE record

BIG-IP: On BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4…
- BIG-IP
Not analysed yet 11 Dec 2020
CVE-2020-5943 CVE record

BIG-IP: In versions 14.1.0-14.1.0.1 and 14.1.2.5-14.1.2.7…
- BIG-IP
Not analysed yet 5 Nov 2020
CVE-2020-5945 CVE record

BIG-IP: In BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7…
- BIG-IP
Not analysed yet 5 Nov 2020
CVE-2020-5940 CVE record

BIG-IP: In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.3…
- BIG-IP
Not analysed yet 5 Nov 2020
CVE-2020-5941 CVE record

BIG-IP: On BIG-IP versions 16.0.0-16.0.0.1 and 15.1.0-15.1.0.5…
- BIG-IP
Not analysed yet 5 Nov 2020