Advisories · Technology

F5 BIG-IP.

Every CVE that names F5 BIG-IP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-28889 CVE record

CVSS 5.9 Medium

BIG-IP SSL vulnerability
- F5 BIG-IP
- Memory corruption
Not analysed yet 8 May 2024
CVE-2024-27202 CVE record

CVSS 4.7 Medium

BIG-IP TMUI XSS vulnerability
- F5 BIG-IP
- Cross-site scripting (XSS)
Not analysed yet 8 May 2024
CVE-2024-25560 CVE record

CVSS 7.5 High

TMM Vulnerability
- F5 BIG-IP
- F5 BIG-IP Next CNF
- Memory corruption
Not analysed yet 8 May 2024
CVE-2024-33608 CVE record

CVSS 7.5 High

BIG-IP IPsec vulnerability
- F5 BIG-IP
- Memory corruption
Not analysed yet 8 May 2024
CVE-2024-28883 CVE record

CVSS 7.4 High

BIG-IP APM browser network access VPN client vulnerability
- F5 BIG-IP Edge Client
- F5 BIG-IP
- CWE-346
Not analysed yet 8 May 2024
CVE-2024-23982 CVE record

CVSS 7.5 High

BIG-IP PEM vulnerability
- F5 BIG-IP
- Memory corruption
Not analysed yet 14 Feb 2024
CVE-2024-21763 CVE record

CVSS 7.5 High

BIG-IP AFM vulnerability
- F5 BIG-IP
- Memory corruption
Not analysed yet 14 Feb 2024
CVE-2024-23805 CVE record

CVSS 7.5 High

F5 Application Visibility and Reporting module and BIG-IP Advanced WAF/ASM vulnerability
- F5 BIG-IP
- Memory corruption
Not analysed yet 14 Feb 2024
CVE-2024-21789 CVE record

CVSS 7.5 High

BIG-IP ASM and Advanced WAF vulnerability
- F5 BIG-IP
- Denial of service
Not analysed yet 14 Feb 2024
CVE-2024-23308 CVE record

CVSS 7.5 High

BIG-IP Advanced WAF and ASM vulnerability
- F5 BIG-IP
- Memory corruption
Not analysed yet 14 Feb 2024
CVE-2024-23603 CVE record

CVSS 3.8 Low

BIG-IP Advanced WAF and ASM Configuration utility vulnerability
- F5 BIG-IP
- SQL injection
Not analysed yet 14 Feb 2024
CVE-2024-24775 CVE record

CVSS 7.5 High

BIG-IP TMM vulnerability
- F5 BIG-IP
- Memory corruption
Not analysed yet 14 Feb 2024
CVE-2024-23314 CVE record

CVSS 7.5 High

BIG-IP HTTP/2 vulnerability
- F5 BIG-IP
- F5 BIG-IP Next SPK
- Memory corruption
Not analysed yet 14 Feb 2024
CVE-2024-22093 CVE record

CVSS 8.7 High

Appliance mode iControl REST vulnerability
- F5 BIG-IP
- Command injection
Not analysed yet 14 Feb 2024
CVE-2024-23979 CVE record

CVSS 7.5 High

BIG-IP SSL Client Certificate LDAP and CRLDP Authentication profiles vulnerability
- F5 BIG-IP
- Denial of service
Not analysed yet 14 Feb 2024
CVE-2024-21849 CVE record

CVSS 7.5 High

BIG-IP Websockets vulnerability
- F5 BIG-IP
- CWE-466
Not analysed yet 14 Feb 2024
CVE-2024-21771 CVE record

CVSS 7.5 High

F5 AFM Signature Matching Vulnerability
- F5 BIG-IP
- Denial of service
Not analysed yet 14 Feb 2024
CVE-2024-21782 CVE record

CVSS 6.7 Medium

BIG-IP and BIG-IQ secure copy vulnerability
- F5 BIG-IP
- F5 BIG-IQ
- Command injection
Not analysed yet 14 Feb 2024
CVE-2024-23976 CVE record

CVSS 6.0 Medium

BIG-IP Appliance mode iAppsLX vulnerability
- F5 BIG-IP
- Privilege escalation
Not analysed yet 14 Feb 2024
CVE-2024-22389 CVE record

CVSS 7.2 High

BIG-IP iControl REST API Vulnerability
- F5 BIG-IP
- Authentication bypass
Not analysed yet 14 Feb 2024
CVE-2023-46748 CVE record

CVSS 8.8 HighCritical · KEVKEV

BIG-IP Configuration utility authenticated SQL injection vulnerability
- F5 BIG-IP
- SQL injection
Not analysed yet 26 Oct 2023
CVE-2023-46747 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

BIG-IP Configuration utility unauthenticated remote code execution vulnerability
- F5 BIG-IP
- Authentication bypass
Not analysed yet 26 Oct 2023
CVE-2023-45219 CVE record

CVSS 4.4 Medium

BIG-IP tmsh vulnerability
- F5 BIG-IP
- Information disclosure
Not analysed yet 10 Oct 2023
CVE-2023-43746 CVE record

CVSS 8.7 High

BIG-IP Appliance mode external monitor vulnerability
- F5 BIG-IP
- Privilege escalation
Not analysed yet 10 Oct 2023
CVE-2023-43485 CVE record

CVSS 5.5 Medium

BIGIP and BIG-IQ TACACS+ audit log Vulnerability
- F5 BIG-IP
- F5 BIG-IQ
- Information disclosure
Not analysed yet 10 Oct 2023
CVE-2023-42768 CVE record

CVSS 7.2 High

BIG-IP iControl REST vulnerability
- F5 BIG-IP
- Authentication bypass
Not analysed yet 10 Oct 2023
CVE-2023-41964 CVE record

CVSS 4.3 Medium

BIG-IP and BIG-IQ Database Variable vulnerability
- F5 BIG-IP
- F5 BIG-IQ
- Information disclosure
Not analysed yet 10 Oct 2023
CVE-2023-41373 CVE record

CVSS 8.8 High

BIG-IP Configuration Utility vulnerability
- F5 BIG-IP
- Path traversal
Not analysed yet 10 Oct 2023
CVE-2023-41253 CVE record

CVSS 5.5 Medium

BIG-IP DNS TSIG Key vulnerability
- F5 BIG-IP
- Information disclosure
Not analysed yet 10 Oct 2023
CVE-2023-41085 CVE record

CVSS 7.5 High

BIG-IP IPSEC vulnerability
- F5 BIG-IP
- CWE-755
Not analysed yet 10 Oct 2023
CVE-2023-40542 CVE record

CVSS 7.5 High

BIG-IP TCP Profile vulnerability
- F5 BIG-IP
- Denial of service
Not analysed yet 10 Oct 2023
CVE-2023-40537 CVE record

CVSS 8.1 High

Multi-blade VIPRION Configuration utility session cookie vulnerability
- F5 BIG-IP
- Authentication bypass
Not analysed yet 10 Oct 2023
CVE-2023-40534 CVE record

CVSS 7.5 High

BIG-IP HTTP/2 vulnerability
- F5 BIG-IP
- F5 BIG-IP Next SPK
- Denial of service
Not analysed yet 10 Oct 2023
CVE-2023-39447 CVE record

CVSS 4.4 Medium

BIG-IP APM Guided Configuration vulnerability
- F5 BIG-IP
- Information disclosure
Not analysed yet 10 Oct 2023
CVE-2023-38423 CVE record

CVSS 5.4 Medium

BIG-IP Configuration utility vulnerability
- F5 BIG-IP
- Cross-site scripting (XSS)
Not analysed yet 2 Aug 2023
CVE-2023-38419 CVE record

CVSS 4.3 Medium

BIG-IP and BIG-IQ iControl SOAP vulnerability
- F5 BIG-IP
- F5 BIG-IQ
- CWE-755
Not analysed yet 2 Aug 2023
CVE-2023-38138 CVE record

CVSS 7.5 High

BIG-IP Configuration utility vulnerability
- F5 BIG-IP
- Cross-site scripting (XSS)
Not analysed yet 2 Aug 2023
CVE-2023-3470 CVE record

CVSS 6.0 Medium

BIG-IP FIPS HSM password vulnerability CVE-2023-3470
- F5 BIG-IP
- Hard-coded credentials
Not analysed yet 2 Aug 2023
CVE-2023-29163 CVE record

CVSS 7.5 High

BIG-IP UDP Profile vulnerability
- F5 BIG-IP
- Denial of service
Not analysed yet 3 May 2023
CVE-2023-28742 CVE record

CVSS 7.2 High

BIG-IP iQuery mesh vulnerability
- F5 BIG-IP
- Command injection
Not analysed yet 3 May 2023
CVE-2023-28406 CVE record

CVSS 4.3 Medium

BIG-IP Configuration utility vulnerability
- F5 BIG-IP
- Path traversal
Not analysed yet 3 May 2023
CVE-2023-27378 CVE record

CVSS 7.5 High

BIG-IP TMUI XSS vulnerability
- F5 BIG-IP
- Cross-site scripting (XSS)
Not analysed yet 3 May 2023
CVE-2023-24594 CVE record

CVSS 5.3 Medium

BIG-IP TMM SSL vulnerability
- F5 BIG-IP
- F5 BIG-IP SPK
- Denial of service
Not analysed yet 3 May 2023
CVE-2023-23555 CVE record

CVSS 7.5 High

BIG-IP Virtual Edition vulnerability
- F5 BIG-IP
- F5 BIG-IP SPK
- CWE-665
Not analysed yet 1 Feb 2023
CVE-2023-23552 CVE record

CVSS 7.5 High

BIG-IP Advanced WAF and ASM vulnerability
- F5 BIG-IP
- Denial of service
Not analysed yet 1 Feb 2023
CVE-2023-22842 CVE record

CVSS 7.5 High

BIG-IP SIP profile vulnerability
- F5 BIG-IP
- Memory corruption
Not analysed yet 1 Feb 2023
CVE-2023-22839 CVE record

CVSS 7.5 High

BIG-IP DNS profile vulnerability
- F5 BIG-IP
- Memory corruption
Not analysed yet 1 Feb 2023
CVE-2023-22664 CVE record

CVSS 7.5 High

BIG-IP HTTP/2 profile vulnerability
- F5 BIG-IP
- F5 BIG-IP SPK
- Denial of service
Not analysed yet 1 Feb 2023
CVE-2023-22422 CVE record

CVSS 7.5 High

HTTP profile vulnerability
- F5 BIG-IP
- Memory corruption
Not analysed yet 1 Feb 2023
CVE-2023-22418 CVE record

CVSS 6.1 Medium

BIG-IP APM virtual server vulnerability
- F5 BIG-IP
- Open redirect
Not analysed yet 1 Feb 2023
CVE-2023-22374 CVE record

CVSS 7.5 HighCritical · CVSS 7+ and EPSS

iControl SOAP vulnerability
- F5 BIG-IP
- Memory corruption
Not analysed yet 1 Feb 2023
CVE-2023-22341 CVE record

CVSS 7.5 High

BIG-IP APM OAuth vulnerability
- F5 BIG-IP
- Memory corruption
Not analysed yet 1 Feb 2023
CVE-2023-22340 CVE record

CVSS 7.5 High

BIG-IP SIP profile vulnerability
- F5 BIG-IP
- Memory corruption
Not analysed yet 1 Feb 2023
CVE-2023-22326 CVE record

CVSS 4.9 Medium

iControl REST and tmsh vulnerability
- F5 BIG-IP
- F5 BIG-IQ Centralized Management
- Broken access control
Not analysed yet 1 Feb 2023
CVE-2023-22323 CVE record

CVSS 7.5 High

BIG-IP SSL OCSP Authentication profile vulnerability
- F5 BIG-IP
- Denial of service
Not analysed yet 1 Feb 2023
CVE-2023-22302 CVE record

CVSS 5.9 Medium

BIG-IP HTTP profile vulnerability
- F5 BIG-IP
- Denial of service
Not analysed yet 1 Feb 2023
CVE-2023-22281 CVE record

CVSS 7.5 High

BIG-IP AFM vulnerability
- F5 BIG-IP
- Memory corruption
Not analysed yet 1 Feb 2023
CVE-2022-41800 CVE record

CVSS 8.7 HighCritical · CVSS 7+ and EPSS

Appliance mode iControl REST vulnerability
- F5 BIG-IP
- Command injection
Not analysed yet 7 Dec 2022
CVE-2022-41622 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

iControl SOAP vulnerability
- F5 BIG-IP
- F5 BIG-IQ Centralized Management
- Cross-site request forgery (CSRF)
Not analysed yet 7 Dec 2022
CVE-2022-41983 CVE record

CVSS 3.7 Low

BIG-IP TMM Vulnerability CVE-2022-41983
- F5 BIG-IP
- Weak cryptography or TLS
Not analysed yet 19 Oct 2022