# F5 BIG-IP.

Every CVE that names F5 BIG-IP among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [BIG-IP iRule vulnerability CVE-2022-41833](https://agentprime.io/advisories/CVE-2022-41833.md)
  `CVE-2022-41833` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 19 Oct 2022 · Tags: Denial of service
- [BIG-IP SIP vulnerability CVE-2022-41832](https://agentprime.io/advisories/CVE-2022-41832.md)
  `CVE-2022-41832` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 19 Oct 2022 · Tags: Denial of service
- [BIG-IP and BIG-IQ iControl REST vulnerability CVE-2022-41770](https://agentprime.io/advisories/CVE-2022-41770.md)
  `CVE-2022-41770` · CVE record: F5 BIG-IP and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 19 Oct 2022 · Tags: Denial of service
- [BIG-IP and BIG-IQ mcpd vulnerability CVE-2022-41694](https://agentprime.io/advisories/CVE-2022-41694.md)
  `CVE-2022-41694` · CVE record: F5 BIG-IP and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 19 Oct 2022 · Tags: CWE-20
- [BIG-IP iRules vulnerability CVE-2022-41624](https://agentprime.io/advisories/CVE-2022-41624.md)
  `CVE-2022-41624` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 19 Oct 2022 · Tags: Denial of service
- [BIG-IP software SYN cookies vulnerability CVE-2022-36795](https://agentprime.io/advisories/CVE-2022-36795.md)
  `CVE-2022-36795` · CVE record: F5 BIG-IP · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2022 · Tags: CWE-682
- [BIG-IP monitor configuration vulnerability CVE-2022-35735](https://agentprime.io/advisories/CVE-2022-35735.md)
  `CVE-2022-35735` · CVE record: F5 BIG-IP · CVSS 7.2 High · Not analysed yet · Published 4 Aug 2022 · Tags: Other injection
- [iControl REST vulnerability CVE-2022-35728](https://agentprime.io/advisories/CVE-2022-35728.md)
  `CVE-2022-35728` · CVE record: F5 BIG-IP and 1 more · CVSS 8.1 High · Not analysed yet · Published 4 Aug 2022 · Tags: Authentication bypass
- [BIG-IP HTTP MRF vulnerability CVE-2022-35272](https://agentprime.io/advisories/CVE-2022-35272.md)
  `CVE-2022-35272` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 4 Aug 2022 · Tags: Denial of service
- [Authenticated iControl REST in Appliance mode vulnerability CVE-2022-35243](https://agentprime.io/advisories/CVE-2022-35243.md)
  `CVE-2022-35243` · CVE record: F5 BIG-IP · CVSS 8.7 High · Not analysed yet · Published 4 Aug 2022 · Tags: Privilege escalation
- [BIG-IP Message Routing MQTT vulnerability CVE-2022-35240](https://agentprime.io/advisories/CVE-2022-35240.md)
  `CVE-2022-35240` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 4 Aug 2022 · Tags: Denial of service
- [HTTP2 profile vulnerability CVE-2022-35236](https://agentprime.io/advisories/CVE-2022-35236.md)
  `CVE-2022-35236` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 4 Aug 2022 · Tags: Denial of service
- [Traffic intelligence feeds vulnerability CVE-2022-34865](https://agentprime.io/advisories/CVE-2022-34865.md)
  `CVE-2022-34865` · CVE record: F5 BIG-IP · CVSS 4.8 Medium · Not analysed yet · Published 4 Aug 2022 · Tags: Weak cryptography or TLS
- [TMM vulnerability CVE-2022-34862](https://agentprime.io/advisories/CVE-2022-34862.md)
  `CVE-2022-34862` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 4 Aug 2022 · Tags: Denial of service
- [BIG-IP and BIG-IQ iControl SOAP vulnerability CVE-2022-34851](https://agentprime.io/advisories/CVE-2022-34851.md)
  `CVE-2022-34851` · CVE record: F5 BIG-IP and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 4 Aug 2022 · Tags: CWE-20
- [BIG-IP and BIG-IQ AWS vulnerability CVE-2022-34844](https://agentprime.io/advisories/CVE-2022-34844.md)
  `CVE-2022-34844` · CVE record: F5 BIG-IP and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 4 Aug 2022 · Tags: CWE-20
- [TMM vulnerability CVE-2022-34655](https://agentprime.io/advisories/CVE-2022-34655.md)
  `CVE-2022-34655` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 4 Aug 2022 · Tags: Memory corruption
- [BIG-IP TLS 1.3 iRule vulnerability CVE-2022-34651](https://agentprime.io/advisories/CVE-2022-34651.md)
  `CVE-2022-34651` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 4 Aug 2022 · Tags: Memory corruption
- [BIG-IP LTM and APM NTLM vulnerability CVE-2022-33968](https://agentprime.io/advisories/CVE-2022-33968.md)
  `CVE-2022-33968` · CVE record: F5 BIG-IP · CVSS 3.7 Low · Not analysed yet · Published 4 Aug 2022 · Tags: Memory corruption
- [BIG-IP iRule vulnerability CVE-2022-33962](https://agentprime.io/advisories/CVE-2022-33962.md)
  `CVE-2022-33962` · CVE record: F5 BIG-IP · CVSS 6.7 Medium · Not analysed yet · Published 4 Aug 2022 · Tags: Privilege escalation
- [TMM vulnerability CVE-2022-32455](https://agentprime.io/advisories/CVE-2022-32455.md)
  `CVE-2022-32455` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 4 Aug 2022 · Tags: Memory corruption
- [Uncontrolled resource consumption in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-29480.md)
  `CVE-2022-29480` · CVE record: F5 BIG-IP · CVSS 5.3 Medium · Not analysed yet · Published 5 May 2022 · Tags: Denial of service
- [Improper input validation in F5 BIG-IP and others](https://agentprime.io/advisories/CVE-2022-29479.md)
  `CVE-2022-29479` · CVE record: F5 BIG-IP and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 5 May 2022 · Tags: CWE-20
- [Path traversal in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-29474.md)
  `CVE-2022-29474` · CVE record: F5 BIG-IP · CVSS 4.3 Medium · Not analysed yet · Published 5 May 2022 · Tags: Path traversal
- [Improper check for unusual conditions in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-29473.md)
  `CVE-2022-29473` · CVE record: F5 BIG-IP · CVSS 5.9 Medium · Not analysed yet · Published 5 May 2022 · Tags: CWE-754
- [Sensitive information in log files in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-28859.md)
  `CVE-2022-28859` · CVE record: F5 BIG-IP · CVSS 6.5 Medium · Not analysed yet · Published 5 May 2022 · Tags: Information disclosure
- [Cross-site scripting in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-28716.md)
  `CVE-2022-28716` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 5 May 2022 · Tags: Cross-site scripting (XSS)
- [Improper input validation in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-28708.md)
  `CVE-2022-28708` · CVE record: F5 BIG-IP · CVSS 5.9 Medium · Not analysed yet · Published 5 May 2022 · Tags: CWE-20
- [Cross-site scripting in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-28707.md)
  `CVE-2022-28707` · CVE record: F5 BIG-IP · CVSS 8.0 High · Not analysed yet · Published 5 May 2022 · Tags: Cross-site scripting (XSS)
- [Improper check for unusual conditions in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-28706.md)
  `CVE-2022-28706` · CVE record: F5 BIG-IP · CVSS 5.9 Medium · Not analysed yet · Published 5 May 2022 · Tags: CWE-754
- [Integer overflow in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-28705.md)
  `CVE-2022-28705` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 5 May 2022 · Tags: Memory corruption
- [Uncontrolled resource consumption in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-28701.md)
  `CVE-2022-28701` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 5 May 2022 · Tags: Denial of service
- [Uncontrolled resource consumption in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-28691.md)
  `CVE-2022-28691` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 5 May 2022 · Tags: Denial of service
- [Cross-site scripting in F5 BIG-IP and others](https://agentprime.io/advisories/CVE-2022-27878.md)
  `CVE-2022-27878` · CVE record: F5 BIG-IP and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 5 May 2022 · Tags: Cross-site scripting (XSS)
- [Incorrect calculation in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-26517.md)
  `CVE-2022-26517` · CVE record: F5 BIG-IP · CVSS 5.9 Medium · Not analysed yet · Published 5 May 2022 · Tags: CWE-682
- [Command injection in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-26415.md)
  `CVE-2022-26415` · CVE record: F5 BIG-IP · CVSS 7.7 High · Not analysed yet · Published 5 May 2022 · Tags: Command injection
- [Uncontrolled resource consumption in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-26372.md)
  `CVE-2022-26372` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 5 May 2022 · Tags: Denial of service
- [Use of uninitialized resource in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-26370.md)
  `CVE-2022-26370` · CVE record: F5 BIG-IP · CVSS 5.9 Medium · Not analysed yet · Published 5 May 2022 · Tags: Memory corruption
- [Incorrect permission assignment in F5 BIG-IP and others](https://agentprime.io/advisories/CVE-2022-26340.md)
  `CVE-2022-26340` · CVE record: F5 BIG-IP and 1 more · CVSS 4.9 Medium · Not analysed yet · Published 5 May 2022 · Tags: Broken access control
- [Improper check for unusual conditions in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-26130.md)
  `CVE-2022-26130` · CVE record: F5 BIG-IP · CVSS 5.3 Medium · Not analysed yet · Published 5 May 2022 · Tags: CWE-754
- [Insufficiently random values in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-26071.md)
  `CVE-2022-26071` · CVE record: F5 BIG-IP · CVSS 7.4 High · Not analysed yet · Published 5 May 2022 · Tags: Weak cryptography or TLS
- [Uncontrolled resource consumption in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-1468.md)
  `CVE-2022-1468` · CVE record: F5 BIG-IP · CVSS 4.3 Medium · Not analysed yet · Published 5 May 2022 · Tags: Denial of service
- [Cross-site request forgery in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-1389.md)
  `CVE-2022-1389` · CVE record: F5 BIG-IP · CVSS 3.1 Low · Not analysed yet · Published 5 May 2022 · Tags: Cross-site request forgery (CSRF)
- [Missing authentication in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-1388.md)
  `CVE-2022-1388` · CVE record: F5 BIG-IP · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV, ransomware · EPSS 1.00 · Not analysed yet · Published 5 May 2022 · Tags: Authentication bypass
- [Improper privilege management in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-27659.md)
  `CVE-2022-27659` · CVE record: F5 BIG-IP · CVSS 4.3 Medium · Not analysed yet · Published 5 May 2022 · Tags: Privilege escalation
- [Incorrect numeric conversion in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-27189.md)
  `CVE-2022-27189` · CVE record: F5 BIG-IP · CVSS 7.5 High · Not analysed yet · Published 5 May 2022 · Tags: CWE-681
- [Uncontrolled resource consumption in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-27182.md)
  `CVE-2022-27182` · CVE record: F5 BIG-IP · CVSS 5.3 Medium · Not analysed yet · Published 5 May 2022 · Tags: Denial of service
- [Path traversal in F5 BIG-IP](https://agentprime.io/advisories/CVE-2022-26835.md)
  `CVE-2022-26835` · CVE record: F5 BIG-IP · CVSS 4.9 Medium · Not analysed yet · Published 5 May 2022 · Tags: Path traversal
- [F5 BIG-IP: On BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1…](https://agentprime.io/advisories/CVE-2020-5854.md)
  `CVE-2020-5854` · CVE record: F5 BIG-IP · No CVSS score · Not analysed yet · Published 6 Feb 2020
- [F5 BIG-IP: On BIG-IP 15.0.0-15.0.1.1 and 14.1.0-14.1.2.2…](https://agentprime.io/advisories/CVE-2020-5856.md)
  `CVE-2020-5856` · CVE record: F5 BIG-IP · No CVSS score · Not analysed yet · Published 6 Feb 2020
- [F5 BIG-IP: Undisclosed traffic patterns received may cause a disruption of service to the Traffic…](https://agentprime.io/advisories/CVE-2020-5852.md)
  `CVE-2020-5852` · CVE record: F5 BIG-IP · No CVSS score · Not analysed yet · Published 14 Jan 2020
- [F5 BIG-IP: On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1…](https://agentprime.io/advisories/CVE-2019-6688.md)
  `CVE-2019-6688` · CVE record: F5 BIG-IP and 1 more · No CVSS score · Not analysed yet · Published 23 Dec 2019
- [F5 BIG-IP: On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1…](https://agentprime.io/advisories/CVE-2019-6685.md)
  `CVE-2019-6685` · CVE record: F5 BIG-IP · No CVSS score · Not analysed yet · Published 23 Dec 2019
- [F5 BIG-IP: On versions 15.0.0-15.0.1.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5…](https://agentprime.io/advisories/CVE-2019-6684.md)
  `CVE-2019-6684` · CVE record: F5 BIG-IP · No CVSS score · Not analysed yet · Published 23 Dec 2019
- [F5 BIG-IP: On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.2…](https://agentprime.io/advisories/CVE-2019-6680.md)
  `CVE-2019-6680` · CVE record: F5 BIG-IP · No CVSS score · Not analysed yet · Published 23 Dec 2019
- [F5 BIG-IP: On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1…](https://agentprime.io/advisories/CVE-2019-6686.md)
  `CVE-2019-6686` · CVE record: F5 BIG-IP · No CVSS score · Not analysed yet · Published 23 Dec 2019
- [F5 BIG-IP: On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1…](https://agentprime.io/advisories/CVE-2019-6681.md)
  `CVE-2019-6681` · CVE record: F5 BIG-IP · No CVSS score · Not analysed yet · Published 23 Dec 2019
- [F5 BIG-IP: On BIG-IP versions 15.0.0-15.0.1, 14.1.0.2-14.1.2.2, 14.0.0.5-14.0.1, 13.1.1.5-13.1.3.1…](https://agentprime.io/advisories/CVE-2019-6679.md)
  `CVE-2019-6679` · CVE record: F5 BIG-IP · No CVSS score · Not analysed yet · Published 23 Dec 2019
- [F5 BIG-IP: On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1…](https://agentprime.io/advisories/CVE-2019-6678.md)
  `CVE-2019-6678` · CVE record: F5 BIG-IP · No CVSS score · Not analysed yet · Published 23 Dec 2019
- [F5 BIG-IP: On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1…](https://agentprime.io/advisories/CVE-2019-6677.md)
  `CVE-2019-6677` · CVE record: F5 BIG-IP · No CVSS score · Not analysed yet · Published 23 Dec 2019

Newest: <https://agentprime.io/advisories/technology/f5-big-ip.md>
Older: <https://agentprime.io/advisories/technology/f5-big-ip.md?cursor=WyIyMDE5LTEyLTIzVDE2OjUwOjI2LjAwMDAwMFoiLCJDVkUtMjAxOS02Njc3Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=f5-big-ip&cursor=WyIyMDIyLTEwLTE5VDIxOjI2OjA5LjU4ODAwMFoiLCJDVkUtMjAyMi00MTk4MyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/f5-big-ip/?cursor=WyIyMDIyLTEwLTE5VDIxOjI2OjA5LjU4ODAwMFoiLCJDVkUtMjAyMi00MTk4MyJd>. Everything for agents: <https://agentprime.io/llms.txt>.