# F5 BIG-IP. Every CVE that names F5 BIG-IP among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [BigIP APM Vulnerability](https://agentprime.io/advisories/CVE-2025-54854.md) `CVE-2025-54854` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2025 · Tags: Memory corruption - [BIG-IP TMSH vulnerability](https://agentprime.io/advisories/CVE-2025-61958.md) `CVE-2025-61958` · CVE record: F5 BIG-IP · CVSS 8.5 High · Not analysed yet · Published 15 Oct 2025 · Tags: Privilege escalation - [BigIP APM Vulnerability](https://agentprime.io/advisories/CVE-2025-53521.md) `CVE-2025-53521` · CVE record: F5 BIG-IP · CVSS 9.3 Critical · Critical (KEV, CVSS 9+) · In CISA KEV · Not analysed yet · Published 15 Oct 2025 · Tags: Memory corruption - [BIG-IP TMM vulnerability](https://agentprime.io/advisories/CVE-2025-58096.md) `CVE-2025-58096` · CVE record: F5 BIG-IP · CVSS 8.2 High · Not analysed yet · Published 15 Oct 2025 · Tags: Memory corruption - [BIG-IP Advanced WAF and ASM vulnerability](https://agentprime.io/advisories/CVE-2025-54858.md) `CVE-2025-54858` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2025 · Tags: Denial of service - [BIG-IP SCP and SFTP vulnerability](https://agentprime.io/advisories/CVE-2025-53868.md) `CVE-2025-53868` · CVE record: F5 BIG-IP · CVSS 8.5 High · Not analysed yet · Published 15 Oct 2025 · Tags: Command injection - [BIG-IP DTLS 1.2 Vulnerability](https://agentprime.io/advisories/CVE-2025-61951.md) `CVE-2025-61951` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2025 · Tags: Memory corruption - [TMM vulnerability](https://agentprime.io/advisories/CVE-2025-53856.md) `CVE-2025-53856` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2025 · Tags: CWE-705 - [BIG-IP PEM vulnerability](https://agentprime.io/advisories/CVE-2025-54479.md) `CVE-2025-54479` · CVE record: F5 BIG-IP and 2 more · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2025 · Tags: Memory corruption - [BIG-IP SSL Orchestrator vulnerability](https://agentprime.io/advisories/CVE-2025-41430.md) `CVE-2025-41430` · CVE record: F5 BIG-IP and 1 more · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2025 · Tags: Denial of service - [BIG-IP Advanced WAF and ASM bd process vulnerability](https://agentprime.io/advisories/CVE-2025-61938.md) `CVE-2025-61938` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2025 · Tags: CWE-1284 - [BIG-IP TMM vulnerability](https://agentprime.io/advisories/CVE-2025-58424.md) `CVE-2025-58424` · CVE record: F5 BIG-IP · CVSS 6.3 Medium · Not analysed yet · Published 15 Oct 2025 · Tags: CWE-340 - [BIG-IP SSL Orchestrator vulnerability](https://agentprime.io/advisories/CVE-2025-55036.md) `CVE-2025-55036` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2025 · Tags: Memory corruption - [BIG-IP DNS cache vulnerability](https://agentprime.io/advisories/CVE-2025-59781.md) `CVE-2025-59781` · CVE record: F5 BIG-IP and 1 more · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2025 · Tags: CWE-459 - [BIG-IP iRules vulnerability](https://agentprime.io/advisories/CVE-2025-46706.md) `CVE-2025-46706` · CVE record: F5 BIG-IP and 2 more · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2025 · Tags: Denial of service - [BIG-IP HTTP/2 vulnerability](https://agentprime.io/advisories/CVE-2025-55669.md) `CVE-2025-55669` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2025 · Tags: CWE-672 - [BIG-IP MPTCP vulnerability](https://agentprime.io/advisories/CVE-2025-48008.md) `CVE-2025-48008` · CVE record: F5 BIG-IP and 2 more · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2025 · Tags: Memory corruption - [BIG-IP HSB vulnerability](https://agentprime.io/advisories/CVE-2025-58153.md) `CVE-2025-58153` · CVE record: F5 BIG-IP · CVSS 8.2 High · Not analysed yet · Published 15 Oct 2025 · Tags: CWE-667 - [BIG-IP SSL/TLS vulnerability](https://agentprime.io/advisories/CVE-2025-60016.md) `CVE-2025-60016` · CVE record: F5 BIG-IP and 2 more · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2025 · Tags: Memory corruption - [BIG-IP AFM DoS protection profile vulnerability](https://agentprime.io/advisories/CVE-2025-59478.md) `CVE-2025-59478` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2025 · Tags: Memory corruption - [BIG-IP Advanced WAF and ASM and NGINX App Protect DNS lookup vulnerability](https://agentprime.io/advisories/CVE-2025-58474.md) `CVE-2025-58474` · CVE record: F5 BIG-IP and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 15 Oct 2025 · Tags: Denial of service - [BIG-IP APM and SSL Orchestrator vulnerability](https://agentprime.io/advisories/CVE-2025-47148.md) `CVE-2025-47148` · CVE record: F5 BIG-IP · CVSS 7.1 High · Not analysed yet · Published 15 Oct 2025 · Tags: Denial of service - [BIG-IP Configuration utility XSS vulnerability](https://agentprime.io/advisories/CVE-2025-59269.md) `CVE-2025-59269` · CVE record: F5 BIG-IP · CVSS 8.4 High · Not analysed yet · Published 15 Oct 2025 · Tags: Cross-site scripting (XSS) - [BIG-IP Configuration utility vulnerability](https://agentprime.io/advisories/CVE-2025-59268.md) `CVE-2025-59268` · CVE record: F5 BIG-IP · CVSS 6.9 Medium · Not analysed yet · Published 15 Oct 2025 · Tags: Information disclosure - [BIG-IP iRules vulnerability](https://agentprime.io/advisories/CVE-2025-53474.md) `CVE-2025-53474` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 15 Oct 2025 · Tags: Memory corruption - [HTTP/2 Vulnerability](https://agentprime.io/advisories/CVE-2025-54500.md) `CVE-2025-54500` · CVE record: F5 BIG-IP and 4 more · CVSS 6.9 Medium · Not analysed yet · Published 13 Aug 2025 · Tags: Denial of service - [BIG-IP APM VPN web client for macOS vulnerability](https://agentprime.io/advisories/CVE-2025-48500.md) `CVE-2025-48500` · CVE record: F5 BIG-IP Edge Client and 1 more · CVSS 7.0 High · Not analysed yet · Published 13 Aug 2025 · Tags: CWE-353 - [BIG-IP APM vulnerability](https://agentprime.io/advisories/CVE-2025-46405.md) `CVE-2025-46405` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 13 Aug 2025 · Tags: Memory corruption - [BIG-IP Client SSL profile vulnerability](https://agentprime.io/advisories/CVE-2025-52585.md) `CVE-2025-52585` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 13 Aug 2025 · Tags: Memory corruption - [TMM Vulnerability](https://agentprime.io/advisories/CVE-2025-41431.md) `CVE-2025-41431` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 7 May 2025 · Tags: Memory corruption - [Appliance mode BIG-IP iControl REST and tmsh vulnerability](https://agentprime.io/advisories/CVE-2025-31644.md) `CVE-2025-31644` · CVE record: F5 BIG-IP · CVSS 8.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.24 · Not analysed yet · Published 7 May 2025 · Tags: Command injection - [BIG-IP PEM vulnerability](https://agentprime.io/advisories/CVE-2025-35995.md) `CVE-2025-35995` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 7 May 2025 · Tags: Memory corruption - [BIG-IP APM PingAccess Virtual Server Vulnerability](https://agentprime.io/advisories/CVE-2025-36525.md) `CVE-2025-36525` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 7 May 2025 · Tags: Memory corruption - [BIG-IP HTTP/2 vulnerability](https://agentprime.io/advisories/CVE-2025-36504.md) `CVE-2025-36504` · CVE record: F5 BIG-IP and 3 more · CVSS 8.7 High · Not analysed yet · Published 7 May 2025 · Tags: Denial of service - [BIG-IP HTTP/2 vulnerability](https://agentprime.io/advisories/CVE-2025-41414.md) `CVE-2025-41414` · CVE record: F5 BIG-IP and 2 more · CVSS 8.7 High · Not analysed yet · Published 7 May 2025 · Tags: Memory corruption - [BIG-IP SIP ALG profile vulnerability](https://agentprime.io/advisories/CVE-2025-41433.md) `CVE-2025-41433` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 7 May 2025 · Tags: Memory corruption - [BIG-IP HTTP vulnerability](https://agentprime.io/advisories/CVE-2025-36557.md) `CVE-2025-36557` · CVE record: F5 BIG-IP and 2 more · CVSS 8.7 High · Not analysed yet · Published 7 May 2025 · Tags: Memory corruption - [SCTP Vulnerability](https://agentprime.io/advisories/CVE-2025-41399.md) `CVE-2025-41399` · CVE record: F5 BIG-IP and 3 more · CVSS 8.7 High · Not analysed yet · Published 7 May 2025 · Tags: Denial of service - [BIG-IP iControl REST and tmsh vulnerability](https://agentprime.io/advisories/CVE-2025-20029.md) `CVE-2025-20029` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: Command injection - [BIG-IP Configuration utility vulnerability](https://agentprime.io/advisories/CVE-2025-24320.md) `CVE-2025-24320` · CVE record: F5 BIG-IP · CVSS 5.1 Medium · Not analysed yet · Published 5 Feb 2025 · Tags: Cross-site scripting (XSS) - [BIG-IP PEM vulnerability](https://agentprime.io/advisories/CVE-2025-24497.md) `CVE-2025-24497` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: Memory corruption - [BIG-IP AFM vulnerability](https://agentprime.io/advisories/CVE-2025-24312.md) `CVE-2025-24312` · CVE record: F5 BIG-IP and 1 more · CVSS 8.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: Denial of service - [BIG-IP SIP Vulnerability](https://agentprime.io/advisories/CVE-2025-22846.md) `CVE-2025-22846` · CVE record: F5 BIG-IP and 1 more · CVSS 8.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: Denial of service - [BIG-IP APM access profile vulnerability](https://agentprime.io/advisories/CVE-2025-23412.md) `CVE-2025-23412` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: Memory corruption - [BIG-IP iControl REST vulnerability](https://agentprime.io/advisories/CVE-2025-23239.md) `CVE-2025-23239` · CVE record: F5 BIG-IP · CVSS 8.5 High · Not analysed yet · Published 5 Feb 2025 · Tags: Command injection - [BIG-IP Advanced WAF/ASM BADoS vulnerability](https://agentprime.io/advisories/CVE-2025-24326.md) `CVE-2025-24326` · CVE record: F5 BIG-IP · CVSS 8.9 High · Not analysed yet · Published 5 Feb 2025 · Tags: Memory corruption - [BIG-IP SIP MRF Vulnerability](https://agentprime.io/advisories/CVE-2025-20045.md) `CVE-2025-20045` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: Memory corruption - [BIG-IP PEM Vulnerability](https://agentprime.io/advisories/CVE-2025-22891.md) `CVE-2025-22891` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: Denial of service - [BIG-IP message routing vulnerability](https://agentprime.io/advisories/CVE-2025-20058.md) `CVE-2025-20058` · CVE record: F5 BIG-IP · CVSS 8.9 High · Not analysed yet · Published 5 Feb 2025 · Tags: Denial of service - [BIG-IP APM Endpoint Inspection vulnerability](https://agentprime.io/advisories/CVE-2025-23415.md) `CVE-2025-23415` · CVE record: F5 BIG-IP · CVSS 2.3 Low · Not analysed yet · Published 5 Feb 2025 · Tags: CWE-345 - [BIG-IP SNMP vulnerability](https://agentprime.io/advisories/CVE-2025-21091.md) `CVE-2025-21091` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: Denial of service - [TMM Vulnerability](https://agentprime.io/advisories/CVE-2025-21087.md) `CVE-2025-21087` · CVE record: F5 BIG-IP and 1 more · CVSS 8.9 High · Not analysed yet · Published 5 Feb 2025 · Tags: Denial of service - [BIG-IP monitors vulnerability](https://agentprime.io/advisories/CVE-2024-45844.md) `CVE-2024-45844` · CVE record: F5 BIG-IP · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.11 · Not analysed yet · Published 16 Oct 2024 · Tags: Authentication bypass - [BIG-IP TMM vulnerability](https://agentprime.io/advisories/CVE-2024-41727.md) `CVE-2024-41727` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 14 Aug 2024 · Tags: Denial of service - [BIG-IP MPTCP vulnerability](https://agentprime.io/advisories/CVE-2024-41164.md) `CVE-2024-41164` · CVE record: F5 BIG-IP and 2 more · CVSS 8.2 High · Not analysed yet · Published 14 Aug 2024 · Tags: Memory corruption - [BIG-IP HSB vulnerability](https://agentprime.io/advisories/CVE-2024-39778.md) `CVE-2024-39778` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 14 Aug 2024 · Tags: CWE-702 - [BIG-IP iControl REST vulnerability](https://agentprime.io/advisories/CVE-2024-41723.md) `CVE-2024-41723` · CVE record: F5 BIG-IP · CVSS 5.3 Medium · Not analysed yet · Published 14 Aug 2024 · Tags: Information disclosure - [BIG-IP TMM tenants on VELOS and rSeries vulnerability](https://agentprime.io/advisories/CVE-2024-32761.md) `CVE-2024-32761` · CVE record: F5 BIG-IP · CVSS 6.5 Medium · Not analysed yet · Published 8 May 2024 · Tags: Memory corruption - [BIG-IP Configuration utility XSS vulnerability](https://agentprime.io/advisories/CVE-2024-31156.md) `CVE-2024-31156` · CVE record: F5 BIG-IP · CVSS 8.0 High · Not analysed yet · Published 8 May 2024 · Tags: Cross-site scripting (XSS) - [BIG-IP Configuration utility XSS vulnerability](https://agentprime.io/advisories/CVE-2024-33604.md) `CVE-2024-33604` · CVE record: F5 BIG-IP · CVSS 6.1 Medium · Not analysed yet · Published 8 May 2024 · Tags: Cross-site scripting (XSS) Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .