# F5 BIG-IP. Every CVE that names F5 BIG-IP among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [BIG-IP SSL vulnerability](https://agentprime.io/advisories/CVE-2024-28889.md) `CVE-2024-28889` · CVE record: F5 BIG-IP · CVSS 5.9 Medium · Not analysed yet · Published 8 May 2024 · Tags: Memory corruption - [BIG-IP TMUI XSS vulnerability](https://agentprime.io/advisories/CVE-2024-27202.md) `CVE-2024-27202` · CVE record: F5 BIG-IP · CVSS 4.7 Medium · Not analysed yet · Published 8 May 2024 · Tags: Cross-site scripting (XSS) - [TMM Vulnerability](https://agentprime.io/advisories/CVE-2024-25560.md) `CVE-2024-25560` · CVE record: F5 BIG-IP and 1 more · CVSS 7.5 High · Not analysed yet · Published 8 May 2024 · Tags: Memory corruption - [BIG-IP IPsec vulnerability](https://agentprime.io/advisories/CVE-2024-33608.md) `CVE-2024-33608` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 8 May 2024 · Tags: Memory corruption - [BIG-IP APM browser network access VPN client vulnerability](https://agentprime.io/advisories/CVE-2024-28883.md) `CVE-2024-28883` · CVE record: F5 BIG-IP Edge Client and 1 more · CVSS 7.4 High · Not analysed yet · Published 8 May 2024 · Tags: CWE-346 - [BIG-IP PEM vulnerability](https://agentprime.io/advisories/CVE-2024-23982.md) `CVE-2024-23982` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 14 Feb 2024 · Tags: Memory corruption - [BIG-IP AFM vulnerability](https://agentprime.io/advisories/CVE-2024-21763.md) `CVE-2024-21763` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 14 Feb 2024 · Tags: Memory corruption - [F5 Application Visibility and Reporting module and BIG-IP Advanced WAF/ASM vulnerability](https://agentprime.io/advisories/CVE-2024-23805.md) `CVE-2024-23805` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 14 Feb 2024 · Tags: Memory corruption - [BIG-IP ASM and Advanced WAF vulnerability](https://agentprime.io/advisories/CVE-2024-21789.md) `CVE-2024-21789` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 14 Feb 2024 · Tags: Denial of service - [BIG-IP Advanced WAF and ASM vulnerability](https://agentprime.io/advisories/CVE-2024-23308.md) `CVE-2024-23308` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 14 Feb 2024 · Tags: Memory corruption - [BIG-IP Advanced WAF and ASM Configuration utility vulnerability](https://agentprime.io/advisories/CVE-2024-23603.md) `CVE-2024-23603` · CVE record: F5 BIG-IP · CVSS 3.8 Low · Not analysed yet · Published 14 Feb 2024 · Tags: SQL injection - [BIG-IP TMM vulnerability](https://agentprime.io/advisories/CVE-2024-24775.md) `CVE-2024-24775` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 14 Feb 2024 · Tags: Memory corruption - [BIG-IP HTTP/2 vulnerability](https://agentprime.io/advisories/CVE-2024-23314.md) `CVE-2024-23314` · CVE record: F5 BIG-IP and 1 more · CVSS 7.5 High · Not analysed yet · Published 14 Feb 2024 · Tags: Memory corruption - [Appliance mode iControl REST vulnerability](https://agentprime.io/advisories/CVE-2024-22093.md) `CVE-2024-22093` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 14 Feb 2024 · Tags: Command injection - [BIG-IP SSL Client Certificate LDAP and CRLDP Authentication profiles vulnerability](https://agentprime.io/advisories/CVE-2024-23979.md) `CVE-2024-23979` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 14 Feb 2024 · Tags: Denial of service - [BIG-IP Websockets vulnerability](https://agentprime.io/advisories/CVE-2024-21849.md) `CVE-2024-21849` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-466 - [F5 AFM Signature Matching Vulnerability](https://agentprime.io/advisories/CVE-2024-21771.md) `CVE-2024-21771` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 14 Feb 2024 · Tags: Denial of service - [BIG-IP and BIG-IQ secure copy vulnerability](https://agentprime.io/advisories/CVE-2024-21782.md) `CVE-2024-21782` · CVE record: F5 BIG-IP and 1 more · CVSS 6.7 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: Command injection - [BIG-IP Appliance mode iAppsLX vulnerability](https://agentprime.io/advisories/CVE-2024-23976.md) `CVE-2024-23976` · CVE record: F5 BIG-IP · CVSS 6.0 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: Privilege escalation - [BIG-IP iControl REST API Vulnerability](https://agentprime.io/advisories/CVE-2024-22389.md) `CVE-2024-22389` · CVE record: F5 BIG-IP · CVSS 7.2 High · Not analysed yet · Published 14 Feb 2024 · Tags: Authentication bypass - [BIG-IP Configuration utility authenticated SQL injection vulnerability](https://agentprime.io/advisories/CVE-2023-46748.md) `CVE-2023-46748` · CVE record: F5 BIG-IP · CVSS 8.8 High · Critical (KEV) · In CISA KEV · Not analysed yet · Published 26 Oct 2023 · Tags: SQL injection - [BIG-IP Configuration utility unauthenticated remote code execution vulnerability](https://agentprime.io/advisories/CVE-2023-46747.md) `CVE-2023-46747` · CVE record: F5 BIG-IP · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 0.97 · Not analysed yet · Published 26 Oct 2023 · Tags: Authentication bypass - [BIG-IP tmsh vulnerability](https://agentprime.io/advisories/CVE-2023-45219.md) `CVE-2023-45219` · CVE record: F5 BIG-IP · CVSS 4.4 Medium · Not analysed yet · Published 10 Oct 2023 · Tags: Information disclosure - [BIG-IP Appliance mode external monitor vulnerability](https://agentprime.io/advisories/CVE-2023-43746.md) `CVE-2023-43746` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 10 Oct 2023 · Tags: Privilege escalation - [BIGIP and BIG-IQ TACACS+ audit log Vulnerability](https://agentprime.io/advisories/CVE-2023-43485.md) `CVE-2023-43485` · CVE record: F5 BIG-IP and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Oct 2023 · Tags: Information disclosure - [BIG-IP iControl REST vulnerability](https://agentprime.io/advisories/CVE-2023-42768.md) `CVE-2023-42768` · CVE record: F5 BIG-IP · CVSS 7.2 High · Not analysed yet · Published 10 Oct 2023 · Tags: Authentication bypass - [BIG-IP and BIG-IQ Database Variable vulnerability](https://agentprime.io/advisories/CVE-2023-41964.md) `CVE-2023-41964` · CVE record: F5 BIG-IP and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 10 Oct 2023 · Tags: Information disclosure - [BIG-IP Configuration Utility vulnerability](https://agentprime.io/advisories/CVE-2023-41373.md) `CVE-2023-41373` · CVE record: F5 BIG-IP · CVSS 8.8 High · Not analysed yet · Published 10 Oct 2023 · Tags: Path traversal - [BIG-IP DNS TSIG Key vulnerability](https://agentprime.io/advisories/CVE-2023-41253.md) `CVE-2023-41253` · CVE record: F5 BIG-IP · CVSS 5.5 Medium · Not analysed yet · Published 10 Oct 2023 · Tags: Information disclosure - [BIG-IP IPSEC vulnerability](https://agentprime.io/advisories/CVE-2023-41085.md) `CVE-2023-41085` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 10 Oct 2023 · Tags: CWE-755 - [BIG-IP TCP Profile vulnerability](https://agentprime.io/advisories/CVE-2023-40542.md) `CVE-2023-40542` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 10 Oct 2023 · Tags: Denial of service - [Multi-blade VIPRION Configuration utility session cookie vulnerability](https://agentprime.io/advisories/CVE-2023-40537.md) `CVE-2023-40537` · CVE record: F5 BIG-IP · CVSS 8.1 High · Not analysed yet · Published 10 Oct 2023 · Tags: Authentication bypass - [BIG-IP HTTP/2 vulnerability](https://agentprime.io/advisories/CVE-2023-40534.md) `CVE-2023-40534` · CVE record: F5 BIG-IP and 1 more · CVSS 7.5 High · Not analysed yet · Published 10 Oct 2023 · Tags: Denial of service - [BIG-IP APM Guided Configuration vulnerability](https://agentprime.io/advisories/CVE-2023-39447.md) `CVE-2023-39447` · CVE record: F5 BIG-IP · CVSS 4.4 Medium · Not analysed yet · Published 10 Oct 2023 · Tags: Information disclosure - [BIG-IP Configuration utility vulnerability](https://agentprime.io/advisories/CVE-2023-38423.md) `CVE-2023-38423` · CVE record: F5 BIG-IP · CVSS 5.4 Medium · Not analysed yet · Published 2 Aug 2023 · Tags: Cross-site scripting (XSS) - [BIG-IP and BIG-IQ iControl SOAP vulnerability](https://agentprime.io/advisories/CVE-2023-38419.md) `CVE-2023-38419` · CVE record: F5 BIG-IP and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 2 Aug 2023 · Tags: CWE-755 - [BIG-IP Configuration utility vulnerability](https://agentprime.io/advisories/CVE-2023-38138.md) `CVE-2023-38138` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 2 Aug 2023 · Tags: Cross-site scripting (XSS) - [BIG-IP FIPS HSM password vulnerability CVE-2023-3470](https://agentprime.io/advisories/CVE-2023-3470.md) `CVE-2023-3470` · CVE record: F5 BIG-IP · CVSS 6.0 Medium · Not analysed yet · Published 2 Aug 2023 · Tags: Hard-coded credentials - [BIG-IP UDP Profile vulnerability](https://agentprime.io/advisories/CVE-2023-29163.md) `CVE-2023-29163` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 3 May 2023 · Tags: Denial of service - [BIG-IP iQuery mesh vulnerability](https://agentprime.io/advisories/CVE-2023-28742.md) `CVE-2023-28742` · CVE record: F5 BIG-IP · CVSS 7.2 High · Not analysed yet · Published 3 May 2023 · Tags: Command injection - [BIG-IP Configuration utility vulnerability](https://agentprime.io/advisories/CVE-2023-28406.md) `CVE-2023-28406` · CVE record: F5 BIG-IP · CVSS 4.3 Medium · Not analysed yet · Published 3 May 2023 · Tags: Path traversal - [BIG-IP TMUI XSS vulnerability](https://agentprime.io/advisories/CVE-2023-27378.md) `CVE-2023-27378` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 3 May 2023 · Tags: Cross-site scripting (XSS) - [BIG-IP TMM SSL vulnerability](https://agentprime.io/advisories/CVE-2023-24594.md) `CVE-2023-24594` · CVE record: F5 BIG-IP and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 3 May 2023 · Tags: Denial of service - [BIG-IP Virtual Edition vulnerability](https://agentprime.io/advisories/CVE-2023-23555.md) `CVE-2023-23555` · CVE record: F5 BIG-IP and 1 more · CVSS 7.5 High · Not analysed yet · Published 1 Feb 2023 · Tags: CWE-665 - [BIG-IP Advanced WAF and ASM vulnerability](https://agentprime.io/advisories/CVE-2023-23552.md) `CVE-2023-23552` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 1 Feb 2023 · Tags: Denial of service - [BIG-IP SIP profile vulnerability](https://agentprime.io/advisories/CVE-2023-22842.md) `CVE-2023-22842` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 1 Feb 2023 · Tags: Memory corruption - [BIG-IP DNS profile vulnerability](https://agentprime.io/advisories/CVE-2023-22839.md) `CVE-2023-22839` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 1 Feb 2023 · Tags: Memory corruption - [BIG-IP HTTP/2 profile vulnerability](https://agentprime.io/advisories/CVE-2023-22664.md) `CVE-2023-22664` · CVE record: F5 BIG-IP and 1 more · CVSS 7.5 High · Not analysed yet · Published 1 Feb 2023 · Tags: Denial of service - [HTTP profile vulnerability](https://agentprime.io/advisories/CVE-2023-22422.md) `CVE-2023-22422` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 1 Feb 2023 · Tags: Memory corruption - [BIG-IP APM virtual server vulnerability](https://agentprime.io/advisories/CVE-2023-22418.md) `CVE-2023-22418` · CVE record: F5 BIG-IP · CVSS 6.1 Medium · Not analysed yet · Published 1 Feb 2023 · Tags: Open redirect - [iControl SOAP vulnerability](https://agentprime.io/advisories/CVE-2023-22374.md) `CVE-2023-22374` · CVE record: F5 BIG-IP · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.71 · Not analysed yet · Published 1 Feb 2023 · Tags: Memory corruption - [BIG-IP APM OAuth vulnerability](https://agentprime.io/advisories/CVE-2023-22341.md) `CVE-2023-22341` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 1 Feb 2023 · Tags: Memory corruption - [BIG-IP SIP profile vulnerability](https://agentprime.io/advisories/CVE-2023-22340.md) `CVE-2023-22340` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 1 Feb 2023 · Tags: Memory corruption - [iControl REST and tmsh vulnerability](https://agentprime.io/advisories/CVE-2023-22326.md) `CVE-2023-22326` · CVE record: F5 BIG-IP and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 1 Feb 2023 · Tags: Broken access control - [BIG-IP SSL OCSP Authentication profile vulnerability](https://agentprime.io/advisories/CVE-2023-22323.md) `CVE-2023-22323` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 1 Feb 2023 · Tags: Denial of service - [BIG-IP HTTP profile vulnerability](https://agentprime.io/advisories/CVE-2023-22302.md) `CVE-2023-22302` · CVE record: F5 BIG-IP · CVSS 5.9 Medium · Not analysed yet · Published 1 Feb 2023 · Tags: Denial of service - [BIG-IP AFM vulnerability](https://agentprime.io/advisories/CVE-2023-22281.md) `CVE-2023-22281` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 1 Feb 2023 · Tags: Memory corruption - [Appliance mode iControl REST vulnerability](https://agentprime.io/advisories/CVE-2022-41800.md) `CVE-2022-41800` · CVE record: F5 BIG-IP · CVSS 8.7 High · Critical (CVSS 7+ and EPSS) · EPSS 0.77 · Not analysed yet · Published 7 Dec 2022 · Tags: Command injection - [iControl SOAP vulnerability](https://agentprime.io/advisories/CVE-2022-41622.md) `CVE-2022-41622` · CVE record: F5 BIG-IP and 1 more · CVSS 8.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.92 · Not analysed yet · Published 7 Dec 2022 · Tags: Cross-site request forgery (CSRF) - [BIG-IP TMM Vulnerability CVE-2022-41983](https://agentprime.io/advisories/CVE-2022-41983.md) `CVE-2022-41983` · CVE record: F5 BIG-IP · CVSS 3.7 Low · Not analysed yet · Published 19 Oct 2022 · Tags: Weak cryptography or TLS Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .