Advisories · Technology

F5 BIG-IP.

Every CVE that names F5 BIG-IP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-41833 CVE record

CVSS 7.5 High

BIG-IP iRule vulnerability CVE-2022-41833
- F5 BIG-IP
- Denial of service
Not analysed yet 19 Oct 2022
CVE-2022-41832 CVE record

CVSS 7.5 High

BIG-IP SIP vulnerability CVE-2022-41832
- F5 BIG-IP
- Denial of service
Not analysed yet 19 Oct 2022
CVE-2022-41770 CVE record

CVSS 6.5 Medium

BIG-IP and BIG-IQ iControl REST vulnerability CVE-2022-41770
- F5 BIG-IP
- F5 BIG-IQ
- Denial of service
Not analysed yet 19 Oct 2022
CVE-2022-41694 CVE record

CVSS 4.9 Medium

BIG-IP and BIG-IQ mcpd vulnerability CVE-2022-41694
- F5 BIG-IP
- F5 BIG-IQ
- CWE-20
Not analysed yet 19 Oct 2022
CVE-2022-41624 CVE record

CVSS 7.5 High

BIG-IP iRules vulnerability CVE-2022-41624
- F5 BIG-IP
- Denial of service
Not analysed yet 19 Oct 2022
CVE-2022-36795 CVE record

CVSS 5.3 Medium

BIG-IP software SYN cookies vulnerability CVE-2022-36795
- F5 BIG-IP
- CWE-682
Not analysed yet 19 Oct 2022
CVE-2022-35735 CVE record

CVSS 7.2 High

BIG-IP monitor configuration vulnerability CVE-2022-35735
- F5 BIG-IP
- Other injection
Not analysed yet 4 Aug 2022
CVE-2022-35728 CVE record

CVSS 8.1 High

iControl REST vulnerability CVE-2022-35728
- F5 BIG-IP
- F5 BIG-IQ Centralized Management
- Authentication bypass
Not analysed yet 4 Aug 2022
CVE-2022-35272 CVE record

CVSS 7.5 High

BIG-IP HTTP MRF vulnerability CVE-2022-35272
- F5 BIG-IP
- Denial of service
Not analysed yet 4 Aug 2022
CVE-2022-35243 CVE record

CVSS 8.7 High

Authenticated iControl REST in Appliance mode vulnerability CVE-2022-35243
- F5 BIG-IP
- Privilege escalation
Not analysed yet 4 Aug 2022
CVE-2022-35240 CVE record

CVSS 7.5 High

BIG-IP Message Routing MQTT vulnerability CVE-2022-35240
- F5 BIG-IP
- Denial of service
Not analysed yet 4 Aug 2022
CVE-2022-35236 CVE record

CVSS 7.5 High

HTTP2 profile vulnerability CVE-2022-35236
- F5 BIG-IP
- Denial of service
Not analysed yet 4 Aug 2022
CVE-2022-34865 CVE record

CVSS 4.8 Medium

Traffic intelligence feeds vulnerability CVE-2022-34865
- F5 BIG-IP
- Weak cryptography or TLS
Not analysed yet 4 Aug 2022
CVE-2022-34862 CVE record

CVSS 7.5 High

TMM vulnerability CVE-2022-34862
- F5 BIG-IP
- Denial of service
Not analysed yet 4 Aug 2022
CVE-2022-34851 CVE record

CVSS 4.3 Medium

BIG-IP and BIG-IQ iControl SOAP vulnerability CVE-2022-34851
- F5 BIG-IP
- F5 BIG-IQ Centralized Management
- CWE-20
Not analysed yet 4 Aug 2022
CVE-2022-34844 CVE record

CVSS 5.9 Medium

BIG-IP and BIG-IQ AWS vulnerability CVE-2022-34844
- F5 BIG-IP
- F5 BIG-IQ Centralized Management
- CWE-20
Not analysed yet 4 Aug 2022
CVE-2022-34655 CVE record

CVSS 7.5 High

TMM vulnerability CVE-2022-34655
- F5 BIG-IP
- Memory corruption
Not analysed yet 4 Aug 2022
CVE-2022-34651 CVE record

CVSS 7.5 High

BIG-IP TLS 1.3 iRule vulnerability CVE-2022-34651
- F5 BIG-IP
- Memory corruption
Not analysed yet 4 Aug 2022
CVE-2022-33968 CVE record

CVSS 3.7 Low

BIG-IP LTM and APM NTLM vulnerability CVE-2022-33968
- F5 BIG-IP
- Memory corruption
Not analysed yet 4 Aug 2022
CVE-2022-33962 CVE record

CVSS 6.7 Medium

BIG-IP iRule vulnerability CVE-2022-33962
- F5 BIG-IP
- Privilege escalation
Not analysed yet 4 Aug 2022
CVE-2022-32455 CVE record

CVSS 7.5 High

TMM vulnerability CVE-2022-32455
- F5 BIG-IP
- Memory corruption
Not analysed yet 4 Aug 2022
CVE-2022-29480 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in F5 BIG-IP
- F5 BIG-IP
- Denial of service
Not analysed yet 5 May 2022
CVE-2022-29479 CVE record

CVSS 5.3 Medium

Improper input validation in F5 BIG-IP and others
- F5 BIG-IP
- F5 BIG-IQ Centralized Management
- CWE-20
Not analysed yet 5 May 2022
CVE-2022-29474 CVE record

CVSS 4.3 Medium

Path traversal in F5 BIG-IP
- F5 BIG-IP
- Path traversal
Not analysed yet 5 May 2022
CVE-2022-29473 CVE record

CVSS 5.9 Medium

Improper check for unusual conditions in F5 BIG-IP
- F5 BIG-IP
- CWE-754
Not analysed yet 5 May 2022
CVE-2022-28859 CVE record

CVSS 6.5 Medium

Sensitive information in log files in F5 BIG-IP
- F5 BIG-IP
- Information disclosure
Not analysed yet 5 May 2022
CVE-2022-28716 CVE record

CVSS 7.5 High

Cross-site scripting in F5 BIG-IP
- F5 BIG-IP
- Cross-site scripting (XSS)
Not analysed yet 5 May 2022
CVE-2022-28708 CVE record

CVSS 5.9 Medium

Improper input validation in F5 BIG-IP
- F5 BIG-IP
- CWE-20
Not analysed yet 5 May 2022
CVE-2022-28707 CVE record

CVSS 8.0 High

Cross-site scripting in F5 BIG-IP
- F5 BIG-IP
- Cross-site scripting (XSS)
Not analysed yet 5 May 2022
CVE-2022-28706 CVE record

CVSS 5.9 Medium

Improper check for unusual conditions in F5 BIG-IP
- F5 BIG-IP
- CWE-754
Not analysed yet 5 May 2022
CVE-2022-28705 CVE record

CVSS 7.5 High

Integer overflow in F5 BIG-IP
- F5 BIG-IP
- Memory corruption
Not analysed yet 5 May 2022
CVE-2022-28701 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in F5 BIG-IP
- F5 BIG-IP
- Denial of service
Not analysed yet 5 May 2022
CVE-2022-28691 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in F5 BIG-IP
- F5 BIG-IP
- Denial of service
Not analysed yet 5 May 2022
CVE-2022-27878 CVE record

CVSS 6.8 Medium

Cross-site scripting in F5 BIG-IP and others
- F5 BIG-IP
- F5 BIG-IP Guided Configuration (GC)
- Cross-site scripting (XSS)
Not analysed yet 5 May 2022
CVE-2022-26517 CVE record

CVSS 5.9 Medium

Incorrect calculation in F5 BIG-IP
- F5 BIG-IP
- CWE-682
Not analysed yet 5 May 2022
CVE-2022-26415 CVE record

CVSS 7.7 High

Command injection in F5 BIG-IP
- F5 BIG-IP
- Command injection
Not analysed yet 5 May 2022
CVE-2022-26372 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in F5 BIG-IP
- F5 BIG-IP
- Denial of service
Not analysed yet 5 May 2022
CVE-2022-26370 CVE record

CVSS 5.9 Medium

Use of uninitialized resource in F5 BIG-IP
- F5 BIG-IP
- Memory corruption
Not analysed yet 5 May 2022
CVE-2022-26340 CVE record

CVSS 4.9 Medium

Incorrect permission assignment in F5 BIG-IP and others
- F5 BIG-IP
- F5 BIG-IQ Centralized Management
- Broken access control
Not analysed yet 5 May 2022
CVE-2022-26130 CVE record

CVSS 5.3 Medium

Improper check for unusual conditions in F5 BIG-IP
- F5 BIG-IP
- CWE-754
Not analysed yet 5 May 2022
CVE-2022-26071 CVE record

CVSS 7.4 High

Insufficiently random values in F5 BIG-IP
- F5 BIG-IP
- Weak cryptography or TLS
Not analysed yet 5 May 2022
CVE-2022-1468 CVE record

CVSS 4.3 Medium

Uncontrolled resource consumption in F5 BIG-IP
- F5 BIG-IP
- Denial of service
Not analysed yet 5 May 2022
CVE-2022-1389 CVE record

CVSS 3.1 Low

Cross-site request forgery in F5 BIG-IP
- F5 BIG-IP
- Cross-site request forgery (CSRF)
Not analysed yet 5 May 2022
CVE-2022-1388 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Missing authentication in F5 BIG-IP
- F5 BIG-IP
- Authentication bypass
Not analysed yet 5 May 2022
CVE-2022-27659 CVE record

CVSS 4.3 Medium

Improper privilege management in F5 BIG-IP
- F5 BIG-IP
- Privilege escalation
Not analysed yet 5 May 2022
CVE-2022-27189 CVE record

CVSS 7.5 High

Incorrect numeric conversion in F5 BIG-IP
- F5 BIG-IP
- CWE-681
Not analysed yet 5 May 2022
CVE-2022-27182 CVE record

CVSS 5.3 Medium

Uncontrolled resource consumption in F5 BIG-IP
- F5 BIG-IP
- Denial of service
Not analysed yet 5 May 2022
CVE-2022-26835 CVE record

CVSS 4.9 Medium

Path traversal in F5 BIG-IP
- F5 BIG-IP
- Path traversal
Not analysed yet 5 May 2022
CVE-2020-5854 CVE record

F5 BIG-IP: On BIG-IP 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1…
- F5 BIG-IP
Not analysed yet 6 Feb 2020
CVE-2020-5856 CVE record

F5 BIG-IP: On BIG-IP 15.0.0-15.0.1.1 and 14.1.0-14.1.2.2…
- F5 BIG-IP
Not analysed yet 6 Feb 2020
CVE-2020-5852 CVE record

F5 BIG-IP: Undisclosed traffic patterns received may cause a disruption of service to the Traffic…
- F5 BIG-IP
Not analysed yet 14 Jan 2020
CVE-2019-6688 CVE record

F5 BIG-IP: On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1…
- F5 BIG-IP
- F5 BIG-IQ
Not analysed yet 23 Dec 2019
CVE-2019-6685 CVE record

F5 BIG-IP: On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1…
- F5 BIG-IP
Not analysed yet 23 Dec 2019
CVE-2019-6684 CVE record

F5 BIG-IP: On versions 15.0.0-15.0.1.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5…
- F5 BIG-IP
Not analysed yet 23 Dec 2019
CVE-2019-6680 CVE record

F5 BIG-IP: On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.2…
- F5 BIG-IP
Not analysed yet 23 Dec 2019
CVE-2019-6686 CVE record

F5 BIG-IP: On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1…
- F5 BIG-IP
Not analysed yet 23 Dec 2019
CVE-2019-6681 CVE record

F5 BIG-IP: On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1…
- F5 BIG-IP
Not analysed yet 23 Dec 2019
CVE-2019-6679 CVE record

F5 BIG-IP: On BIG-IP versions 15.0.0-15.0.1, 14.1.0.2-14.1.2.2, 14.0.0.5-14.0.1, 13.1.1.5-13.1.3.1…
- F5 BIG-IP
Not analysed yet 23 Dec 2019
CVE-2019-6678 CVE record

F5 BIG-IP: On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1…
- F5 BIG-IP
Not analysed yet 23 Dec 2019
CVE-2019-6677 CVE record

F5 BIG-IP: On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1…
- F5 BIG-IP
Not analysed yet 23 Dec 2019