BA
Product
Big-ip Advanced Firewall Manager
On CISA KEVExploited in the wildRansomware-linked
551
CVEs
11
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 35High 303Medium 162Low 0
Watch
Add Big-ip Advanced Firewall Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-41085 | 7.5 | Oct 10 | When IPSec is configured on a Virtual Server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not… Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4 |
| CVE-2023-40542 | 7.5 | Oct 10 | When TCP Verified Accept is enabled on a TCP profile that is configured on a Virtual Server, undisclosed requests can cause an increase in memory resource utilization. Note:… Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4 |
| CVE-2023-40534 | 7.5 | Oct 10 | When a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, and an iRule using the HTTP_REQUEST event or Local Traffic Policy are associated… Affected: 16.1.0 before 16.1.4.1; 17.1.0 |
| CVE-2023-29163 | 7.5 | May 3 | When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate. Note: Software versions… Affected: 14.1.0 before 14.1.5.4; 15.1.0 before 15.1.8.2; 16.1.0 before 16.1.3.4; 17.0.0 |
| CVE-2023-23555 | 7.5 | Feb 1 | On BIG-IP Virtual Edition versions 15.1x beginning in 15.1.4 to before 15.1.8 and 14.1.x beginning in 14.1.5 to before 14.1.5.3, and BIG-IP SPK beginning in 1.5.0 to before 1.6.0,… Affected: 14.1.5 before 14.1.5.3; 15.1.0 before 15.1.8 |
| CVE-2023-22842 | 7.5 | Feb 1 | On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type… Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.3; 15.1.0 before 15.1.8.1; 16.1.0 before 16.1.3.3 |
| CVE-2023-22664 | 7.5 | Feb 1 | On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, and BIG-IP SPK starting in version 1.6.0, when a client-side HTTP/2 profile and the HTTP MRF Router option… Affected: 16.1.0 before 16.1.3.3; 17.0.0 before 17.0.0.2 |
| CVE-2023-22422 | 7.5 | Feb 1 | On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, when a HTTP profile with the non-default Enforcement options of Enforce HTTP Compliance and Unknown Methods:… Affected: 16.1.0 before 16.1.3.3; 17.0.0 before 17.0.0.2 |
| CVE-2023-22340 | 7.5 | Feb 1 | On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type… Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.3; 15.1.0 before 15.1.8; 16.1.0 before 16.1.3.3; 17.0.0 before 17.0.0.2 |
| CVE-2023-22323 | 7.5 | Feb 1 | In BIP-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when OCSP authentication profile is… Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.3; 15.1.0 before 15.1.8.1; 16.1.0 before 16.1.3.3; 17.0.0 before 17.0.0.2 |
| CVE-2023-22281 | 7.5 | Feb 1 | On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a BIG-IP AFM NAT policy with a… Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.3; 15.1.0 before 15.1.8; 16.1.0 before 16.1.3.3; 17.0.0 before 17.0.0.2 |
| CVE-2022-41833 | 7.5 | Oct 19 | BIG-IP iRule vulnerability CVE-2022-41833 Affected: 13.1.0 through 13.1.5 |
| CVE-2022-41832 | 7.5 | Oct 19 | BIG-IP SIP vulnerability CVE-2022-41832 Affected: 13.1.0 before 13.1.5.1; 14.1.0 before 14.1.5.1; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1; 17.0.0 before 17.0.0.1 |
| CVE-2022-41806 | 7.5 | Oct 19 | BIG-IP AFM NAT64 Policy Vulnerability CVE-2022-41806 Affected: 15.1.0 before 15.1.5.1; 16.1.0 before 16.1.3.2 |
| CVE-2022-41624 | 7.5 | Oct 19 | BIG-IP iRules vulnerability CVE-2022-41624 Affected: 13.1.0 before 13.1.5.1; 14.1.0 before 14.1.5.2; 15.1.0 before 15.1.7; 16.1.0 before 16.1.3.2; 17.0.0 before 17.0.0.1 |
| CVE-2022-36795 | 7.5 | Oct 19 | BIG-IP software SYN cookies vulnerability CVE-2022-36795 Affected: 14.1.0 before 14.1.5.1; 15.1.0 before 15.1.7; 16.1.0 before 16.1.3.1; 17.0.0 before 17.0.0.1 |
| CVE-2022-35240 | 7.5 | Aug 4 | BIG-IP Message Routing MQTT vulnerability CVE-2022-35240 Affected: 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.2.2 |
| CVE-2022-35236 | 7.5 | Aug 4 | HTTP2 profile vulnerability CVE-2022-35236 Affected: 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.2.2 |
| CVE-2022-34862 | 7.5 | Aug 4 | TMM vulnerability CVE-2022-34862 Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1 |
| CVE-2022-34844 | 7.5 | Aug 4 | BIG-IP and BIG-IQ AWS vulnerability CVE-2022-34844 Affected: 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1 |
| CVE-2022-34655 | 7.5 | Aug 4 | TMM vulnerability CVE-2022-34655 Affected: 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.0.0 before 16.0.1.1 |
| CVE-2022-34651 | 7.5 | Aug 4 | BIG-IP TLS 1.3 iRule vulnerability CVE-2022-34651 Affected: 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1 |
| CVE-2022-32455 | 7.5 | Aug 4 | TMM vulnerability CVE-2022-32455 Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.2.2 |
| CVE-2022-29473 | 7.5 | May 5 | On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when an IPSec ALG profile is configured on a virtual… Affected: 13.1.0; 13.1.1; 13.1.3; 13.1.4; 13.1.5; 14.1.0; +12 more |
| CVE-2022-28706 | 7.5 | May 5 | On F5 BIG-IP 16.1.x versions prior to 16.1.2 and 15.1.x versions prior to 15.1.5.1, when the DNS resolver configuration is used, undisclosed requests can cause the Traffic… Affected: 15.1.0; 15.1.1; 15.1.2; 15.1.3; 15.1.4; 15.1.5; +3 more |
| CVE-2022-28705 | 7.5 | May 5 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, on platforms with an… Affected: 13.1.0; 13.1.1; 13.1.3; 13.1.4; 13.1.5; 14.1.0; +13 more |
| CVE-2022-28701 | 7.5 | May 5 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, when the stream profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource… Affected: 16.1.0; 16.1.1; 16.1.2 |
| CVE-2022-28691 | 7.5 | May 5 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when a Real Time Streaming… Affected: 13.1.0; 13.1.1; 13.1.3; 13.1.4; 13.1.5; 14.1.0; +13 more |
| CVE-2022-27189 | 7.5 | May 5 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x… Affected: 11.6.1; 11.6.2; 11.6.3; 11.6.4; 11.6.5; 12.1.0; +25 more |
| CVE-2022-26517 | 7.5 | May 5 | On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when the BIG-IP CGNAT Large Scale NAT (LSN) pool is… Affected: 13.1.0; 13.1.1; 13.1.3; 13.1.4; 13.1.5; 14.1.0; +12 more |
| CVE-2022-26372 | 7.5 | May 5 | On F5 BIG-IP 15.1.x versions prior to 15.1.0.2, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when a DNS listener is… Affected: 11.6.1; 11.6.2; 11.6.3; 11.6.4; 11.6.5; 12.1.0; +25 more |
| CVE-2022-26370 | 7.5 | May 5 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, and 14.1.x versions prior to 14.1.4.6, when a Session Initiation Protocol (SIP) message routing… Affected: 14.1.0; 14.1.2; 14.1.3; 14.1.4; 15.1.0; 15.1.1; +7 more |
| CVE-2022-26071 | 7.5 | May 5 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x… Affected: 11.6.1; 11.6.2; 11.6.3; 11.6.4; 11.6.5; 12.1.0; +25 more |
| CVE-2022-23025 | 7.5 | Jan 25 | On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, when a SIP ALG profile is configured on a virtual server,… Affected: 13.1.0 through 13.1.4; 14.1.0 through 14.1.4; 15.1.0 through 15.1.3; 16.1.0 through 16.1.1 |
| CVE-2022-23024 | 7.5 | Jan 25 | On BIG-IP AFM version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.2, and all versions of 13.1.x, when the IPsec application layer gateway (ALG) logging… Affected: 13.1.0 through 13.1.4; 14.1.0 through 14.1.4.1; 15.1.0 through 15.1.4 |
| CVE-2022-23022 | 7.5 | Jan 25 | On BIG-IP version 16.1.x before 16.1.2, when an HTTP profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to… Affected: 16.1.0 before 16.1.2 |
| CVE-2022-23021 | 7.5 | Jan 25 | On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server, undisclosed requests can cause the Traffic Management… Affected: 16.1.0 before 16.1.2 |
| CVE-2022-23020 | 7.5 | Jan 25 | On BIG-IP version 16.1.x before 16.1.2, when the 'Respond on Error' setting is enabled on the Request Logging profile and configured on a virtual server, undisclosed requests can… Affected: 16.1.0 before 16.1.2 |
| CVE-2022-23019 | 7.5 | Jan 25 | On BIG-IP version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x, when a message routing type virtual server is… Affected: 12.1.0 through 12.1.6; 13.1.0 through 13.1.4; 14.1.0 before 14.1.4.4; 15.1.0 before 15.1.4.1; 16.1.0 before 16.1.2 |
| CVE-2022-23018 | 7.5 | Jan 25 | On BIG-IP AFM version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and 13.1.x beginning in 13.1.3.4, when a virtual server is configured with both HTTP… Affected: 13.1.3.4 before 13.1.4.1; 14.1.0 before 14.1.4.5; 15.1.0 before 15.1.4.1; 16.1.0 before 16.1.2 |
| CVE-2022-23017 | 7.5 | Jan 25 | On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when a virtual server is configured with a DNS profile with the… Affected: 13.1.0 through 13.1.4; 14.1.0 before 14.1.4.5; 15.1.0 before 15.1.4.1; 16.0.0 before 16.1.0 |
| CVE-2022-23016 | 7.5 | Jan 25 | On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server, undisclosed requests can cause the… Affected: 15.1.0 before 15.1.4.1; 16.1.0 before 16.1.2 |
| CVE-2022-23015 | 7.5 | Jan 25 | On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, and 14.1.2.6-14.1.4.4, when a Client SSL profile is configured on a virtual server with Client Certificate… Affected: 14.1.2.6 before 14.1.4.4; 15.1.0 before 15.1.4.1; 16.0.0 before 16.1.0 |
| CVE-2022-23012 | 7.5 | Jan 25 | On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is configured on a virtual server, undisclosed requests can cause the Traffic… Affected: 14.1.0 before 14.1.4.5; 15.1.0 before 15.1.4.1 |
| CVE-2022-23011 | 7.5 | Jan 25 | On certain hardware BIG-IP platforms, in version 15.1.x before 15.1.4 and 14.1.x before 14.1.3, virtual servers may stop responding while processing TCP traffic due to an issue in… Affected: 14.1.0 before 14.1.3; 15.1.0 before 15.1.4; 14.1.0 before 14.1.3; 15.1.0 before 15.1.4; 14.1.0 before 14.1.3; 15.1.0 before 15.1.4 |
| CVE-2022-23010 | 7.5 | Jan 25 | On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a FastL4 profile and an HTTP profile… Affected: 11.6.0 through 11.6.5; 12.1.0 through 12.1.6; 13.1.0 through 13.1.4; 14.1.0 before 14.1.4.4; 15.1.0 before 15.1.4.1; 16.0.0 before 16.1.0 |
| CVE-2002-20001 | 7.5 | Nov 11 | The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive… Affected: 13.1.0 through 17.1.2; 17.5.0 |
| CVE-2021-23039 | 7.5 | Sep 14 | On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.2.8, and all versions of 13.1.x and 12.1.x, when IPSec is configured on a BIG-IP system, undisclosed… Affected: 12.1.0 through 12.1.6; 13.1.0 through 13.1.4; 14.1.0 before 14.1.2.8; 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.2 |
| CVE-2021-23035 | 7.5 | Sep 14 | On BIG-IP 14.1.x before 14.1.4.4, when an HTTP profile is configured on a virtual server, after a specific sequence of packets, chunked responses can cause the Traffic Management… Affected: 14.1.0 through 14.1.4.4 |
| CVE-2021-23034 | 7.5 | Sep 14 | On BIG-IP version 16.x before 16.1.0 and 15.1.x before 15.1.3.1, when a DNS profile using a DNS cache resolver is configured on a virtual server, undisclosed requests can cause… Affected: 15.1.0 before 15.1.3.1; 16.0.0 before 16.1.0 |
The 500 most important CVEs for this product (exploited first, then by severity)