F5 BIG-IP
259 published vulnerabilities name this product. The 200 most recent are listed.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-94127 | 21.1.0 – < Hotfix-BIGIP-21.1.0.2.0.30.22-ENG ; 17.5.0 – < Hotfix-BIGIP-17.5.1.9.0.160.12-ENG ; 17.1.0 – < Hotfix-BIGIP-17.1.3.5.0.41.14-ENG | BIG-IP APM OAuth vulnerability | CRITICAL 9.3 | 25 % | KEV | |
| CVE-2026-66842 | 21.1.0 – < 21.1.0.1 ; 21.0.0 – < 21.0.0.3 ; 17.5.0 – < 17.5.1.8 ; … | BIG-IP and BIG-IQ Configuration utility vulnerability | HIGH 8.7 | 0.5 % | ||
| CVE-2026-63020 | 21.1.0 – < 21.1.0.1 ; 21.0.0 – < 21.0.0.3 ; 17.5.0 – < 17.5.1.8 ; … | BIG-IP Configuration utility vulnerability | LOW 2.3 | 0.2 % | ||
| CVE-2026-59762 | 21.1.0 – < 21.1.0.1 ; 21.0.0 – < 21.0.0.3 ; 17.5.0 – < 17.5.1.8 ; … | BIG-IP HTTP/2 vulnerability | HIGH 8.7 | 0.6 % | ||
| CVE-2026-40423 | 21.0.0 – < 21.0.0.2 ; 17.5.0 – < 17.5.1.6 ; 17.1.0 – < 17.1.3.2 ; … | BIG-IP SIP profile vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2026-42930 | 21.0.0 – < 21.0.0.2 ; 17.5.0 – < 17.5.1.6 ; 17.1.0 – < 17.1.3.2 ; … | Appliance mode iControl REST vulnerability | HIGH 8.5 | 0.5 % | ||
| CVE-2026-39458 | 21.0.0 – < 21.0.0.1 ; 17.5.0 – < 17.5.1.6 ; 17.1.0 – < 17.1.3.2 ; … | BIG-IP DNS Cache vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2026-24464 | 21.0.0 – < 21.0.0.2 ; 17.5.0 – < 17.5.1.6 ; 17.1.0 – < 17.1.3.2 ; … | Appliance mode iControl REST vulnerability | MEDIUM 6.9 | 0.9 % | ||
| CVE-2026-42406 | 21.0.0 – < 21.0.0.2 ; 17.5.0 – < 17.5.1.6 ; 17.1.0 – < 17.1.3.2 ; … | BIG-IP and BIG-IQ privilege escalation vulnerability | HIGH 8.5 | 0.1 % | ||
| CVE-2026-41959 | 21.0.0 – < 21.0.0.2 ; 17.5.0 – < 17.5.1.6 ; 17.1.0 – < 17.1.3.2 ; … | iControl and tmsh REST vulnerability | HIGH 7.1 | 0.2 % | ||
| CVE-2026-42937 | 21.0.0 – < 21.0.0.2 ; 17.5.0 – < 17.5.1.6 ; 17.1.0 – < 17.1.3.2 ; … | iControl REST and tmsh vulnerability | HIGH 7.1 | 0.2 % | ||
| CVE-2026-42058 | 21.0.0 – < 21.0.0.2 ; 17.5.0 – < 17.5.1.6 ; 17.1.0 – < 17.1.3.2 ; … | BIG-IP iControl REST vulnerability | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-32643 | 21.0.0 – < 21.0.0.2 ; 17.5.0 – < 17.5.1.6 ; 17.1.0 – < 17.1.3.2 ; … | BIG-IP and BIG-IQ privilege escalation vulnerability | HIGH 8.5 | 0.2 % | ||
| CVE-2026-41217 | 21.0.0 – < 21.0.0.2 ; 17.5.0 – < 17.5.1.6 ; 17.1.0 – < 17.1.3.2 ; … | BIG-IP tmsh vulnerability | HIGH 8.3 | 0.1 % | ||
| CVE-2026-39455 | 21.0.0 – < 21.0.0.2 ; 17.5.0 – < 17.5.1.6 ; 17.1.0 – < 17.1.3.2 ; … | BIG-IP Configuration utility vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2026-32673 | 21.0.0 – < 21.0.0.2 ; 17.5.0 – < 17.5.1.6 ; 17.1.0 – < 17.1.3.2 ; … | BIG-IP scripted monitor vulnerability | HIGH 8.5 | 0.2 % | ||
| CVE-2026-42063 | 21.0.0 – < 21.0.0.2 ; 17.5.0 – < 17.5.1.6 ; 17.1.0 – < 17.1.3.2 ; … | iControl SOAP vulnerability | MEDIUM 6.9 | 0.3 % | ||
| CVE-2026-34176 | 21.0.0 – < 21.0.0.2 ; 17.5.0 – < 17.5.1.6 ; 17.1.0 – < 17.1.3.2 ; … | Knowledge Appliance mode iControl REST vulnerability | HIGH 8.5 | 0.7 % | ||
| CVE-2026-41953 | 21.0.0 – < 21.0.0.2 ; 17.5.0 – < 17.5.1.6 ; 17.1.0 – < 17.1.3.2 ; … | BIG-IP Privilege Escalation vulnerability | HIGH 8.5 | 0.2 % | ||
| CVE-2026-41225 | 21.0.0 – < 21.0.0.2 ; 17.5.0 – < 17.5.1.6 ; 17.1.0 – < 17.1.3.2 ; … | iControl REST vulnerability | HIGH 8.6 | 0.3 % | ||
| CVE-2026-39459 | 21.0.0 – < 21.0.0.2 ; 17.5.0 – < 17.5.1.6 ; 17.1.0 – < 17.1.3.2 ; … | iControl REST and tmsh vulnerability | HIGH 8.6 | 0.3 % | ||
| CVE-2026-42924 | 21.0.0 – < 21.0.0.1 ; 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; … | BIG-IP iControl SOAP vulnerability | HIGH 8.5 | 0.2 % | ||
| CVE-2026-40698 | 21.0.0 – < 21.0.0.2 ; 17.5.0 – < 17.5.1.6 ; 17.1.0 – < 17.1.3.2 ; … | iControl REST and TMSH vulnerability | HIGH 8.5 | 0.2 % | ||
| CVE-2026-40631 | 21.0.0 – < 21.0.0.2 ; 17.5.0 – < 17.5.1.6 ; 17.1.0 – < 17.1.3.2 ; … | BIG-IP iControl SOAP vulnerability | HIGH 8.5 | 0.2 % | ||
| CVE-2026-42409 | 21.0.0 – < 21.0.0.1 ; 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; … | BIG-IP HTTP/2 vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2026-41227 | 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; ≥ 16.1.0 | BIG-IP HTTP/2 Layer 7 Dos Protection vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2026-40060 | 21.0.0 – < 21.0.0.1 ; 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; … | BIG-IP Advanced WAF and ASM vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2026-40061 | 21.0.0 – < 21.0.0.1 ; 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; … | iControl REST and tmsh vulnerability | HIGH 8.5 | 0.2 % | ||
| CVE-2026-35062 | 21.0.0 – < 21.0.0.1 ; 17.5.1 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; … | iControl SOAP vulnerability | HIGH 7.1 | 0.2 % | ||
| CVE-2026-42920 | 21.0.0 – < 21.0.0.1 ; 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; … | BIG-IP DTLS Vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2026-41956 | 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; ≥ 16.1.0 | BIG-IP TMM Vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2026-40618 | 21.0.0 – < 21.0.0.1 ; 17.5.0 – < 17.1.5.4 ; 17.1.0 – < 17.1.3.1 ; … | BIG-IP SSL/TLS vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2026-42919 | 21.0.0 – < 21.0.0.1 ; 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; … | F5 BIG-IP Appliance Mode Vulnerability | HIGH 7.1 | 0.3 % | ||
| CVE-2026-41218 | 21.0.0 – < 21.0.0.1 ; 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; … | BIG-IP PEM iRules vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2026-40629 | 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; ≥ 16.1.0 | BIG-IP SSL/TLS vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2026-42781 | 21.0.0 – < 21.0.0.1 ; 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 | BIG-IP FastL4 virtual server vulnerability | HIGH 7.1 | 0.2 % | ||
| CVE-2026-42408 | 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; ≥ 16.1.0 | BIG-IP DNS tmsh vulnerability | MEDIUM 6.7 | 0.1 % | ||
| CVE-2026-41957 | 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; ≥ 16.1.0 | BIG-IP and BIG-IQ Configuration utility vulnerability | HIGH 8.7 | 0.5 % | ||
| CVE-2026-40067 | 21.0.0 – < 21.0.0.1 ; 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; … | BIG-IP APM Vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2026-42780 | 21.0.0 – < 21.0.0.1 ; 17.5.0 – < 17.5.1.5 ; 17.1.0 – < 17.1.3.1 ; … | BIG-IP SSL Orchestrator vulnerability | MEDIUM 6.9 | 0.9 % | ||
| CVE-2026-40699 | 21.0.0 – < 21.0.0.1 ; 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; … | BIG-IP Configuration utility vulnerability | HIGH 7.1 | 0.3 % | ||
| CVE-2026-34019 | 17.5.0 – < 17.5.1 ; 17.1.0 – < 17.1.3 ; ≥ 16.1.0 | BIG-IP BFD vulnerability | MEDIUM 6.3 | 0.3 % | ||
| CVE-2026-41219 | 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; ≥ 16.1.0 | BIG-IP QKView vulnerability | HIGH 7.1 | 0.3 % | ||
| CVE-2026-40462 | 21.0.0 – < 21.0.0.1 ; 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; … | iControl REST and tmsh vulnerability | HIGH 7.1 | 0.2 % | ||
| CVE-2026-28758 | 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; ≥ 16.1.0 | BIG-IP iControl REST vulnerability | MEDIUM 6.7 | 0.1 % | ||
| CVE-2026-41954 | 21.0.0 – < 21.0.0.1 ; 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; … | iControl REST and tmsh vulnerability | MEDIUM 6.9 | 0.3 % | ||
| CVE-2026-40435 | 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; ≥ 16.1.0 | BIG-IP httpd access control vulnerability | MEDIUM 6.9 | 0.2 % | ||
| CVE-2026-40703 | 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; ≥ 16.1.0 | BIG-IP Configuration utility CSRF vulnerability | MEDIUM 5.3 | 0.1 % | ||
| CVE-2026-2507 | ≥ 17.5.1.4 | BIG-IP TMM Vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2026-22548 | 17.1.0 – < 17.1.3 | BIG-IP Advanced WAF and ASM vulnerability | HIGH 8.2 | 0.2 % | ||
| CVE-2026-20732 | 17.5.0 – < 17.5.1.4 ; 17.1.0 – < 17.1.3.1 ; ≥ 16.1.0 | BIG-IP Configuration utility vulnerability | LOW 2.3 | 0.2 % | ||
| CVE-2025-61990 | 17.5.0 – < 17.5.1.3 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 ; … | TMM vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2025-61933 | 17.5.0 – < 17.5.1.3 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 ; … | BIG-IP APM cross-site scripting (XSS) vulnerability | MEDIUM 5.1 | 0.2 % | ||
| CVE-2025-61935 | 17.5.0 – < 17.5.1 ; 17.1.0 – < 17.1.3 ; 15.1.0 – < 15.1.10.8 | BIG-IP Advanced WAF and ASM vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2025-58071 | 17.5.0 – < 17.5.1 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 ; … | BIG-IP IPSec vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-61974 | 17.5.0 – < 17.5.1.3 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 ; … | BIG-IP SSL/TLS vulnerability | HIGH 8.7 | 0.5 % | ||
| CVE-2025-59483 | 17.5.0 – < 17.5.1.3 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 ; … | BIG-IP Configuration utility and tmsh vulnerability | HIGH 8.5 | 0.4 % | ||
| CVE-2025-54755 | 17.5.0 – < 17.5.1.3 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 ; … | BIG-IP Configuration utility vulnerability | MEDIUM 6.9 | 1.2 % | ||
| CVE-2025-61960 | 17.5.0 – < 17.5.1.3 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 | BIG-IP APM portal access vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2025-59481 | 17.5.0 – < 17.5.1.3 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 ; … | BIG-IP iControl REST and tmsh vulnerability | HIGH 8.5 | 0.4 % | ||
| CVE-2025-61958 | 17.5.0 – < 17.5.1.1 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 ; … | BIG-IP TMSH vulnerability | HIGH 8.5 | 0.4 % | ||
| CVE-2025-54854 | 17.5.0 – < 17.5.1.3 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 ; … | BigIP APM Vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2025-58096 | 17.5.0 – < 17.5.1.3 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 ; … | BIG-IP TMM vulnerability | HIGH 8.2 | 0.3 % | ||
| CVE-2025-53521 | 17.5.0 – < 17.5.1.3 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 ; … | BigIP APM Vulnerability | CRITICAL 9.3 | 2.3 % | KEV | |
| CVE-2025-54858 | 17.5.0 – < 17.5.1.3 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 ; … | BIG-IP Advanced WAF and ASM vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2025-53868 | 17.5.0 – < 17.5.1 ; 17.1.0 – < 17.1.3.1 ; 16.1.0 – < 16.1.6.1 ; … | BIG-IP SCP and SFTP vulnerability | HIGH 8.5 | 0.4 % | ||
| CVE-2025-61951 | 17.5.0 – < 17.5.1 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 | BIG-IP DTLS 1.2 Vulnerability | HIGH 8.7 | 0.2 % | ||
| CVE-2025-54479 | 17.5.0 – < 17.5.1 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 ; … | BIG-IP PEM vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2025-53856 | 17.5.0 – < 17.5.1.3 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 ; … | TMM vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2025-41430 | 17.5.0 – < 17.5.1 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.4 ; … | BIG-IP SSL Orchestrator vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2025-61938 | 17.5.0 – < 17.5.1 ; 17.1.0 – < 17.1.3 | BIG-IP Advanced WAF and ASM bd process vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2025-58424 | 17.1.0 – < 17.1.2.2 ; 16.1.0 – < 16.1.6 ; 15.1.0 – < 15.1.10.8 | BIG-IP TMM vulnerability | MEDIUM 6.3 | 0.2 % | ||
| CVE-2025-59781 | 17.1.0 – < 17.1.2.2 ; 16.1.0 – < 16.1.6 ; 15.1.0 – < 15.1.10.8 | BIG-IP DNS cache vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2025-55036 | 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6 ; 15.1.0 – < 15.1.10.8 | BIG-IP SSL Orchestrator vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2025-55669 | 17.1.0 – < 17.1.2.2 ; 16.1.0 – < 16.1.6 | BIG-IP HTTP/2 vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-46706 | 17.1.0 – < 17.1.2.2 ; 16.1.0 – < 16.1.6 | BIG-IP iRules vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-60016 | 17.1.0 – < 17.1.2 | BIG-IP SSL/TLS vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-58153 | 17.5.0 – < 17.5.1 ; 16.1.0 – < 16.1.6.1 ; 15.1.0 – < 15.1.10.8 | BIG-IP HSB vulnerability | HIGH 8.2 | 0.2 % | ||
| CVE-2025-48008 | 17.1.0 – < 17.1.2.2 ; 16.1.0 – < 16.1.6 ; 15.1.0 – < 15.1.10.8 | BIG-IP MPTCP vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-59478 | 17.5.0 – < 17.5.1 ; 17.1.0 – < 17.1.3 ; 15.1.0 – < 15.1.10.8 | BIG-IP AFM DoS protection profile vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-58474 | 17.1.0 – < 17.1.2 | BIG-IP Advanced WAF and ASM and NGINX App Protect DNS lookup vulnerability | MEDIUM 6.9 | 0.4 % | ||
| CVE-2025-59269 | 17.5.0 – < 17.5.1 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 ; … | BIG-IP Configuration utility XSS vulnerability | HIGH 8.4 | 0.3 % | ||
| CVE-2025-59268 | 17.5.0 – < 17.5.1.3 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 ; … | BIG-IP Configuration utility vulnerability | MEDIUM 6.9 | 0.4 % | ||
| CVE-2025-47148 | 17.5.0 – < 17.5.1 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 ; … | BIG-IP APM and SSL Orchestrator vulnerability | HIGH 7.1 | 0.4 % | ||
| CVE-2025-53474 | 17.5.0 – < 17.5.1.3 ; 17.1.0 – < 17.1.3 ; 16.1.0 – < 16.1.6.1 ; … | BIG-IP iRules vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2025-54500 | ≥ 17.5.0 ; ≥ 17.1.0 ; ≥ 16.1.0 ; … | HTTP/2 Vulnerability | MEDIUM 6.9 | 0.5 % | ||
| CVE-2025-48500 | ≥ 17.5.0 ; ≥ 17.1.0 ; ≥ 16.1.0 ; … | BIG-IP APM VPN web client for macOS vulnerability | HIGH 7.0 | 0.1 % | ||
| CVE-2025-46405 | 17.1.0 – < 17.1.2.2 ; 16.1.0 – < 16.1.6 ; ≥ 15.1.0 | BIG-IP APM vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2025-52585 | 17.1.0 – < 17.1.2.2 ; 16.1.0 – < 16.1.6 ; ≥ 15.1.0 | BIG-IP Client SSL profile vulnerability | HIGH 8.7 | 0.3 % | ||
| CVE-2025-41431 | 17.1.0 – < 17.1.2.2 | TMM Vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-36525 | 17.1.0 – < 17.1.2.2 ; 16.1.0 – < 16.1.6 ; ≥ 15.1.0 | BIG-IP APM PingAccess Virtual Server Vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-35995 | 17.1.0 – < 17.1.2.2 ; 16.1.0 – < 16.1.6 ; ≥ 15.1.0 | BIG-IP PEM vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-31644 | 17.1.0 – < 17.1.2.2 ; 16.1.0 – < 16.1.6 ; 15.1.0 – < 15.1.10.7 | Appliance mode BIG-IP iControl REST and tmsh vulnerability | HIGH 8.5 | 24 % | ||
| CVE-2025-41433 | 17.1.0 – < 17.1.2 ; 16.1.0 – < 16.1.5 ; ≥ 15.1.0 | BIG-IP SIP ALG profile vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-41414 | 17.1.0 – < 17.1.2 ; 16.1.0 – < 16.1.5 ; ≥ 15.1.0 | BIG-IP HTTP/2 vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-36504 | 17.1.0 – < 17.1.2 ; 16.1.0 – < 16.1.6 | BIG-IP HTTP/2 vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-41399 | 17.1.0 – < 17.1.1 ; 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.9 | SCTP Vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-36557 | 17.1.0 – < 17.1.2 ; 16.1.0 – < 16.1.5 | BIG-IP HTTP vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-20029 | 17.1.0 – < 17.1.2.1 ; 16.1.0 – < 16.1.5.2 ; 15.1.0 – < 15.1.10.6 | BIG-IP iControl REST and tmsh vulnerability | HIGH 8.7 | 7.1 % | ||
| CVE-2025-24497 | 17.1.0 – < 17.1.2 | BIG-IP PEM vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-24320 | 17.1.0 – < 17.1.2 ; 16.1.0 – < 16.1.5.2 ; 15.1.0 – < 15.1.10.6 | BIG-IP Configuration utility vulnerability | MEDIUM 5.1 | 0.4 % | ||
| CVE-2025-24312 | 17.1.0 – < 17.1.2 ; ≥ 16.1.0 ; ≥ 15.1.0 | BIG-IP AFM vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-22846 | 17.1.0 – < 17.1.2 ; 16.1.0 – < 16.1.5 ; ≥ 15.1.0 | BIG-IP SIP Vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-23412 | 17.1.0 – < 17.1.2 ; 16.1.3 – < 16.1.5 | BIG-IP APM access profile vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-23239 | 17.1.1 – < 17.1.2 | BIG-IP iControl REST vulnerability | HIGH 8.5 | 0.8 % | ||
| CVE-2025-24326 | 17.1.0 – < 17.1.2 ; 16.1.0 – < 16.1.5 ; ≥ 15.1.0 | BIG-IP Advanced WAF/ASM BADoS vulnerability | HIGH 8.9 | 0.4 % | ||
| CVE-2025-20045 | 17.1.0 – < 17.1.2 ; 16.1.0 – < 16.1.5 ; ≥ 15.1.0 | BIG-IP SIP MRF Vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-22891 | 17.1.0 – < 17.1.2 ; 16.1.0 – < 16.1.5 ; ≥ 15.1.0 | BIG-IP PEM Vulnerability | HIGH 8.7 | 0.4 % | ||
| CVE-2025-20058 | 17.1.0 – < 17.1.2 ; ≥ 16.1.0 ; ≥ 15.1.0 | BIG-IP message routing vulnerability | HIGH 8.9 | 0.4 % | ||
| CVE-2025-23415 | 17.1.0 – < 17.1.2 ; 16.1.0 – < 16.1.5 ; ≥ 15.1.0 | BIG-IP APM Endpoint Inspection vulnerability | LOW 2.3 | 0.1 % | ||
| CVE-2025-21091 | 17.1.0 – < 17.1.2 ; ≥ 16.1.0 ; ≥ 15.1.0 | BIG-IP SNMP vulnerability | HIGH 8.7 | 0.5 % | ||
| CVE-2025-21087 | 17.1.0 – < 17.1.2 ; ≥ 16.1.0 ; ≥ 15.1.0 | TMM Vulnerability | HIGH 8.9 | 0.4 % | ||
| CVE-2024-45844 | 17.1.0 – < 17.1.1.4 ; 16.1.0 – < 16.1.5 ; 15.1.0 – < 15.1.10.5 | BIG-IP monitors vulnerability | HIGH 8.6 | 11 % | ||
| CVE-2024-41727 | 16.1.0 – < 16.1.5 ; ≥ 15.1.0 | BIG-IP TMM vulnerability | HIGH 8.7 | 0.5 % | ||
| CVE-2024-41164 | 17.1.0 – < 17.1.1 ; 16.1.0 – < 16.1.5 ; 15.1.0 – < 15.1.10 | BIG-IP MPTCP vulnerability | HIGH 8.2 | 0.4 % | ||
| CVE-2024-39778 | 17.1.0 – < 17.1.1 ; 16.1.0 – < 16.1.5 ; ≥ 15.1.0 | BIG-IP HSB vulnerability | HIGH 8.7 | 0.5 % | ||
| CVE-2024-41723 | 17.1.0 – < 17.1.1 ; 16.1.0 – < 16.1.5 ; ≥ 15.1.0 | BIG-IP iControl REST vulnerability | MEDIUM 5.3 | 0.3 % | ||
| CVE-2024-32761 | 15.1.0 – < 15.1.10 | BIG-IP TMM tenants on VELOS and rSeries vulnerability | MEDIUM 6.5 | 0.5 % | ||
| CVE-2024-33604 | 17.1.0 – < 17.1.1.3 ; 16.1.0 – < 16.1.4.3 ; 15.1.0 – < 15.1.10.4 | BIG-IP Configuration utility XSS vulnerability | MEDIUM 6.1 | 0.3 % | ||
| CVE-2024-31156 | 17.1.0 – < 17.1.1.3 ; 16.1.0 – < 16.1.4.3 ; 15.1.0 – < 15.1.10.4 | BIG-IP Configuration utility XSS vulnerability | HIGH 8.0 | 0.6 % | ||
| CVE-2024-28889 | 17.1.0 – < 17.1.1.3 ; 16.1.2.1 – < 16.1.4.3 ; 15.1.5 – < 15.1.10.4 | BIG-IP SSL vulnerability | MEDIUM 5.9 | 0.4 % | ||
| CVE-2024-27202 | 17.1.0 – < 17.1.1.3 ; 16.1.0 – < 16.1.4.3 ; 15.1.0 – < 15.1.10.4 | BIG-IP TMUI XSS vulnerability | MEDIUM 4.7 | 0.3 % | ||
| CVE-2024-33608 | 17.1.0 – < 17.1.1 | BIG-IP IPsec vulnerability | HIGH 7.5 | 0.6 % | ||
| CVE-2024-25560 | 17.1.0 – < 17.1.1 ; 16.1.0 – < 16.1.4 ; ≥ 15.1.0 | TMM Vulnerability | HIGH 7.5 | 0.5 % | ||
| CVE-2024-28883 | 17.1.0 – < 17.1.1 ; 16.1.0 – < 16.1.4.2 ; 15.1.0 – < 15.1.10.3 | BIG-IP APM browser network access VPN client vulnerability | HIGH 7.4 | 0.2 % | ||
| CVE-2024-23982 | fixed in 17.0.0, 16.1.0, 15.1.0 | BIG-IP PEM vulnerability | HIGH 7.5 | 0.5 % | ||
| CVE-2024-23805 | 17.1.0 – < 17.1.1 ; 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.10 | F5 Application Visibility and Reporting module and BIG-IP Advanced WAF/ASM vulnerability | HIGH 7.5 | 0.5 % | ||
| CVE-2024-21763 | 17.1.0 – < 17.1.1 ; 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.10 | BIG-IP AFM vulnerability | HIGH 7.5 | 0.5 % | ||
| CVE-2024-23603 | 17.1.0 – < 17.1.1 ; 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.10 | BIG-IP Advanced WAF and ASM Configuration utility vulnerability | LOW 3.8 | 0.3 % | ||
| CVE-2024-23308 | 17.1.0 – < 17.1.1 | BIG-IP Advanced WAF and ASM vulnerability | HIGH 7.5 | 0.5 % | ||
| CVE-2024-21789 | 17.1.0 – < 17.1.1 | BIG-IP ASM and Advanced WAF vulnerability | HIGH 7.5 | 0.5 % | ||
| CVE-2024-24775 | 17.1.0 – < 17.1.1 ; 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.10 | BIG-IP TMM vulnerability | HIGH 7.5 | 0.5 % | ||
| CVE-2024-23314 | 17.1.0 – < 17.1.1 ; 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.9 | BIG-IP HTTP/2 vulnerability | HIGH 7.5 | 0.5 % | ||
| CVE-2024-23979 | 17.1.0 – < 17.1.1 ; 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.9 | BIG-IP SSL Client Certificate LDAP and CRLDP Authentication profiles vulnerability | HIGH 7.5 | 0.3 % | ||
| CVE-2024-22093 | 17.1.0 – < 17.1.1 ; 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.9 | Appliance mode iControl REST vulnerability | HIGH 8.7 | 0.8 % | ||
| CVE-2024-21849 | 16.1.0 – < 16.1.4 | BIG-IP Websockets vulnerability | HIGH 7.5 | 0.5 % | ||
| CVE-2024-21771 | 17.1.0 – < 17.1.1 ; 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.9 | F5 AFM Signature Matching Vulnerability | HIGH 7.5 | 0.5 % | ||
| CVE-2024-23976 | 17.1.0 – < 17.1.1 ; 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.9 | BIG-IP Appliance mode iAppsLX vulnerability | MEDIUM 6.0 | 0.2 % | ||
| CVE-2024-21782 | 17.1.0 – < 17.1.1 ; 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.9 | BIG-IP and BIG-IQ secure copy vulnerability | MEDIUM 6.7 | 0.2 % | ||
| CVE-2024-22389 | 17.1.0 – < 17.1.1 ; 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.9 | BIG-IP iControl REST API Vulnerability | HIGH 7.2 | 0.5 % | ||
| CVE-2023-46748 | ≥ 17.1.0 ; ≥ 16.1.0 ; ≥ 15.1.0 ; … | BIG-IP Configuration utility authenticated SQL injection vulnerability | HIGH 8.8 | 4.2 % | KEV | |
| CVE-2023-46747 | ≥ 17.1.0 ; ≥ 16.1.0 ; ≥ 15.1.0 ; … | BIG-IP Configuration utility unauthenticated remote code execution vulnerability | CRITICAL 9.8 | 97 % | KEV | |
| CVE-2023-45219 | 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.9 ; ≥ 14.1.0 ; … | BIG-IP tmsh vulnerability | MEDIUM 4.4 | 0.2 % | ||
| CVE-2023-43746 | 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.9 ; ≥ 14.1.0 ; … | BIG-IP Appliance mode external monitor vulnerability | HIGH 8.7 | 0.5 % | ||
| CVE-2023-43485 | 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.9 ; ≥ 14.1.0 ; … | BIGIP and BIG-IQ TACACS+ audit log Vulnerability | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-42768 | 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.9 ; ≥ 14.1.0 ; … | BIG-IP iControl REST vulnerability | HIGH 7.2 | 0.7 % | ||
| CVE-2023-41964 | 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.9 ; ≥ 14.1.0 ; … | BIG-IP and BIG-IQ Database Variable vulnerability | MEDIUM 6.5 | 0.3 % | ||
| CVE-2023-41373 | 17.1.0 – < 17.1.0.3 ; 16.1.0 – < 16.1.4.1 ; 15.1.0 – < 15.1.10.2 ; … | BIG-IP Configuration Utility vulnerability | CRITICAL 9.9 | 2.3 % | ||
| CVE-2023-41253 | 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.9 ; ≥ 14.1.0 ; … | BIG-IP DNS TSIG Key vulnerability | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-41085 | 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.9 ; ≥ 14.1.0 ; … | BIG-IP IPSEC vulnerability | HIGH 7.5 | 0.6 % | ||
| CVE-2023-40542 | 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.9 ; ≥ 14.1.0 ; … | BIG-IP TCP Profile vulnerability | HIGH 7.5 | 0.7 % | ||
| CVE-2023-40537 | 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.9 ; ≥ 14.1.0 ; … | Multi-blade VIPRION Configuration utility session cookie vulnerability | HIGH 8.1 | 0.5 % | ||
| CVE-2023-40534 | 17.1.0 – < 17.1.0.3.0.23.4-ENG ; 16.1.0 – < 16.1.4.1.0.13.5-ENG | BIG-IP HTTP/2 vulnerability | HIGH 7.5 | 0.7 % | ||
| CVE-2023-39447 | 16.1.0 – < 16.1.4 ; 15.1.0 – < 15.1.8 | BIG-IP APM Guided Configuration vulnerability | MEDIUM 4.4 | 0.2 % | ||
| CVE-2023-38423 | 17.1.0 – < 17.1.0.2 ; 16.1.0 – < 16.1.3.5 ; 15.1.0 – < 15.1.9.1 ; … | BIG-IP Configuration utility vulnerability | MEDIUM 5.4 | 0.3 % | ||
| CVE-2023-38419 | 17.1.0 – < 17.1.0.2 ; 16.1.0 – < 16.1.3.5 ; 15.1.0 – < 15.1.9.1 ; … | BIG-IP and BIG-IQ iControl SOAP vulnerability | MEDIUM 4.3 | 0.5 % | ||
| CVE-2023-38138 | 17.1.0 – < 17.1.0.2 ; 16.1.0 – < 16.1.3.5 ; 15.1.0 – < 15.1.9.1 ; … | BIG-IP Configuration utility vulnerability | HIGH 7.5 | 0.4 % | ||
| CVE-2023-3470 | 15.1.0 – < 15.1.1 ; 14.1.0 – < 14.1.4 ; 13.1.0 – < 13.1.4 | BIG-IP FIPS HSM password vulnerability CVE-2023-3470 | MEDIUM 6.1 | 0.2 % | ||
| CVE-2023-29163 | ≥ 17.0.0 ; 16.1.2.2 – < 16.1.3.4 ; 15.1.5.1 – < 15.1.8.2 ; … | BIG-IP UDP Profile vulnerability | HIGH 7.5 | 0.6 % | ||
| CVE-2023-28742 | 17.1.0 – < 17.1.0.1 ; ≥ 17.0.0 ; 16.1.0 – < 16.1.3.4 ; … | BIG-IP iQuery mesh vulnerability | HIGH 8.8 | 1.5 % | ||
| CVE-2023-28406 | ≥ 17.0.0 ; 16.1.0 – < 16.1.3.4 ; 15.1.0 – < 15.1.8.2 ; … | BIG-IP Configuration utility vulnerability | MEDIUM 4.3 | 1.2 % | ||
| CVE-2023-27378 | 17.1.0 – < 17.1.0.1 ; ≥ 17.0.0 ; 16.1.0 – < 16.1.3.4 ; … | BIG-IP TMUI XSS vulnerability | HIGH 7.5 | 0.4 % | ||
| CVE-2023-24594 | 16.1.2 – < 16.1.2.1 ; 15.1.4.1 – < 15.1.5 ; ≥ 14.1.5 | BIG-IP TMM SSL vulnerability | MEDIUM 5.3 | 0.6 % | ||
| CVE-2023-23555 | 15.1.4 – < 15.1.8 ; 14.1.5 – < 14.1.5.3 | BIG-IP Virtual Edition vulnerability | HIGH 7.5 | 0.6 % | ||
| CVE-2023-23552 | 17.0.0 – < 17.0.0.2 ; 16.1.0 – < 16.1.3.3 ; 15.1.0 – < 15.1.8 ; … | BIG-IP Advanced WAF and ASM vulnerability | HIGH 7.5 | 1.5 % | ||
| CVE-2023-22842 | 16.1.0 – < 16.1.3.3 ; 15.1.0 – < 15.1.8.1 ; 14.1.0 – < 14.1.5.3 ; … | BIG-IP SIP profile vulnerability | HIGH 7.5 | 0.6 % | ||
| CVE-2023-22839 | 17.0.0 – < 17.0.0.2 ; 16.1.0 – < 16.1.3.3 ; 15.1.0 – < 15.1.8.1 ; … | BIG-IP DNS profile vulnerability | HIGH 7.5 | 0.6 % | ||
| CVE-2023-22664 | 17.0.0 – < 17.0.0.2 ; 16.1.0 – < 16.1.3.3 | BIG-IP HTTP/2 profile vulnerability | HIGH 7.5 | 0.6 % | ||
| CVE-2023-22422 | 17.0.0 – < 17.0.0.2 ; 16.1.0 – < 16.1.3.3 | HTTP profile vulnerability | HIGH 7.5 | 0.6 % | ||
| CVE-2023-22418 | 17.0.0 – < 17.0.0.2 ; 16.1.0 – < 16.1.3.3 ; 15.1.0 – < 15.1.7 ; … | BIG-IP APM virtual server vulnerability | MEDIUM 6.1 | 0.3 % | ||
| CVE-2023-22374 | 17.0.0 – < 17.1.0 ; 16.1.2.2 – < 16.1.3.4 ; 15.1.5.1 – < 15.1.8.2 ; … | iControl SOAP vulnerability | HIGH 8.5 | 73 % | ||
| CVE-2023-22341 | 14.1.0 – < 14.1.5.3 ; ≥ 13.1.0 | BIG-IP APM OAuth vulnerability | HIGH 7.5 | 0.6 % | ||
| CVE-2023-22340 | 16.1.0 – < 16.1.3.3 ; 15.1.0 – < 15.1.8 ; 14.1.0 – < 14.1.5.3 ; … | BIG-IP SIP profile vulnerability | HIGH 7.5 | 0.6 % | ||
| CVE-2023-22326 | 17.0.0 – < 17.0.0.2 ; 16.1.0 – < 16.1.3.3 ; 15.1.0 – < 15.1.8.1 ; … | iControl REST and tmsh vulnerability | MEDIUM 4.9 | 0.5 % | ||
| CVE-2023-22323 | 17.0.0 – < 17.0.0.2 ; 16.1.0 – < 16.1.3.3 ; 15.1.0 – < 15.1.8.1 ; … | BIG-IP SSL OCSP Authentication profile vulnerability | HIGH 7.5 | 0.7 % | ||
| CVE-2023-22302 | 17.0.0 – < 17.0.0.2 ; 16.1.2.2 – < 16.1.3.3 | BIG-IP HTTP profile vulnerability | MEDIUM 5.9 | 0.5 % | ||
| CVE-2023-22281 | 17.0.0 – < 17.0.0.2 ; 16.1.0 – < 16.1.3.3 ; 15.1.0 – < 15.1.8 ; … | BIG-IP AFM vulnerability | HIGH 7.5 | 0.6 % | ||
| CVE-2022-41800 | 17.0.x ; 16.1.x ; 15.1.x ; … | Appliance mode iControl REST vulnerability | HIGH 8.7 | 77 % | ||
| CVE-2022-41622 | 17.x ; 16.1.x ; 15.1.x ; … | iControl SOAP vulnerability | HIGH 8.8 | 92 % | ||
| CVE-2022-41983 | 16.1.x – < 16.1.3.1 ; 15.1.x – < 15.1.7 ; 14.1.x – < 14.1.5.1 ; … | BIG-IP TMM Vulnerability CVE-2022-41983 | LOW 3.7 | 0.3 % | ||
| CVE-2022-41833 | 13.1.0 – < 13.1.x* | BIG-IP iRule vulnerability CVE-2022-41833 | HIGH 7.5 | 0.7 % | ||
| CVE-2022-41832 | 17.0.x – < 17.0.0.1 ; 16.1.x – < 16.1.3.1 ; 15.1.x – < 15.1.6.1 ; … | BIG-IP SIP vulnerability CVE-2022-41832 | HIGH 7.5 | 0.7 % | ||
| CVE-2022-41770 | 17.0.x – < 17.0.0.1 ; 16.1.x – < 16.1.3.1 ; 15.1.x – < 15.1.7 ; … | BIG-IP and BIG-IQ iControl REST vulnerability CVE-2022-41770 | MEDIUM 6.5 | 0.7 % | ||
| CVE-2022-41694 | 16.1.x – < 16.1.3 ; 15.1.x – < 15.1.6.1 ; 14.1.x – < 14.1.5 ; … | BIG-IP and BIG-IQ mcpd vulnerability CVE-2022-41694 | MEDIUM 4.9 | 0.7 % | ||
| CVE-2022-41624 | 17.0.x – < 17.0.0.1 ; 16.1.x – < 16.1.3.2 ; 15.1.x – < 15.1.7 ; … | BIG-IP iRules vulnerability CVE-2022-41624 | HIGH 7.5 | 0.7 % | ||
| CVE-2022-36795 | 17.0.x – < 17.0.0.1 ; 16.1.x – < 16.1.3.1 ; 15.1.x – < 15.1.7 ; … | BIG-IP software SYN cookies vulnerability CVE-2022-36795 | HIGH 7.5 | 0.7 % | ||
| CVE-2022-35735 | 13.1.0 – < 13.1.x* ; 14.1.x – < 14.1.5.1 ; 15.1.x – < 15.1.6.1 ; … | BIG-IP monitor configuration vulnerability CVE-2022-35735 | HIGH 7.2 | 0.9 % | ||
| CVE-2022-35728 | 13.1.0 – < 13.1.x* ; 14.1.x – < 14.1.5.1 ; 15.1.x – < 15.1.6.1 ; … | iControl REST vulnerability CVE-2022-35728 | CRITICAL 9.8 | 0.7 % | ||
| CVE-2022-35272 | 16.1.x – < 16.1.3.1 ; 17.0.x – < 17.0.0.1 | BIG-IP HTTP MRF vulnerability CVE-2022-35272 | HIGH 7.5 | 0.5 % | ||
| CVE-2022-35243 | 13.1.0 – < 13.1.x* ; 14.1.x – < 14.1.5 ; 15.1.x – < 15.1.5.1 ; … | Authenticated iControl REST in Appliance mode vulnerability CVE-2022-35243 | CRITICAL 9.1 | 0.7 % | ||
| CVE-2022-35240 | 14.1.x – < 14.1.5 ; 15.1.x – < 15.1.6.1 ; 16.1.x – < 16.1.2.2 | BIG-IP Message Routing MQTT vulnerability CVE-2022-35240 | HIGH 7.5 | 0.8 % | ||
| CVE-2022-35236 | 14.1.x – < 14.1.5 ; 15.1.x – < 15.1.6.1 ; 16.1.x – < 16.1.2.2 | HTTP2 profile vulnerability CVE-2022-35236 | HIGH 7.5 | 0.8 % | ||
| CVE-2022-34865 | 13.1.0 – < 13.1.x* ; 14.1.x – < 14.1.5 ; 15.1.x – < 15.1.6.1 | Traffic intelligence feeds vulnerability CVE-2022-34865 | CRITICAL 9.1 | 0.4 % | ||
| CVE-2022-34862 | 13.1.0 – < 13.1.x* ; 14.1.x – < 14.1.5 ; 15.1.x – < 15.1.6.1 ; … | TMM vulnerability CVE-2022-34862 | HIGH 7.5 | 1.3 % | ||
| CVE-2022-34851 | 13.1.0 – < 13.1.x* ; 14.1.x – < 14.1.5.1 ; 15.1.x – < 15.1.6.1 ; … | BIG-IP and BIG-IQ iControl SOAP vulnerability CVE-2022-34851 | MEDIUM 6.5 | 0.8 % | ||
| CVE-2022-34844 | 15.1.x – < 15.1.6.1 ; 16.1.x – < 16.1.3.1 | BIG-IP and BIG-IQ AWS vulnerability CVE-2022-34844 | HIGH 7.5 | 0.7 % | ||
| CVE-2022-34655 | 14.1.x – < 14.1.5 ; 15.1.x – < 15.1.6.1 ; 16.0.x – < 16.0.1.1 | TMM vulnerability CVE-2022-34655 | HIGH 7.5 | 0.8 % | ||
| CVE-2022-34651 | 15.1.x – < 15.1.6.1 ; 16.1.x – < 16.1.3.1 | BIG-IP TLS 1.3 iRule vulnerability CVE-2022-34651 | HIGH 7.5 | 0.8 % | ||
| CVE-2022-33968 | 13.1.0 – < 13.1.x* ; 14.1.x – < 14.1.5.1 ; 15.1.x – < 15.1.6.1 ; … | BIG-IP LTM and APM NTLM vulnerability CVE-2022-33968 | MEDIUM 4.9 | 0.5 % | ||
| CVE-2022-33962 | 13.1.0 – < 13.1.x* ; 14.1.x – < 14.1.5.1 ; 15.1.x – < 15.1.6.1 ; … | BIG-IP iRule vulnerability CVE-2022-33962 | MEDIUM 6.7 | 0.2 % |