BA
Product
Big-ip Advanced Firewall Manager
On CISA KEVExploited in the wildRansomware-linked
551
CVEs
11
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 35High 303Medium 162Low 0
Watch
Add Big-ip Advanced Firewall Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40699 | 6.5 | May 13 | BIG-IP Configuration utility vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6 |
| CVE-2026-41219 | 6.5 | May 13 | BIG-IP QKView vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6 |
| CVE-2026-40462 | 6.5 | May 13 | iControl REST and tmsh vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 21.0.0; 16.1.0 through 16.1.6 |
| CVE-2025-59483 | 6.5 | Oct 15 | BIG-IP Configuration utility and tmsh vulnerability Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1 |
| CVE-2024-32761 | 6.5 | May 8 | Under certain conditions, a data leak may occur in the Traffic Management Microkernels (TMMs) of BIG-IP tenants running on VELOS and rSeries platforms Affected: 15.1.0 before 15.1.10 |
| CVE-2023-41964 | 6.5 | Oct 10 | The BIG-IP and BIG-IQ systems do not encrypt some sensitive information written to Database (DB) variables. Note: Software versions which have reached End of Technical Support… Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4 |
| CVE-2022-41813 | 6.5 | Oct 19 | BIG-IP PEM and AFM TMUI, TMSH and iControl vulnerability CVE-2022-41813 Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1 |
| CVE-2022-41770 | 6.5 | Oct 19 | BIG-IP and BIG-IQ iControl REST vulnerability CVE-2022-41770 Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.1; 15.1.0 before 15.1.7; 16.1.0 before 16.1.3.1; 17.0.0 before 17.0.0.1 |
| CVE-2022-34851 | 6.5 | Aug 4 | BIG-IP and BIG-IQ iControl SOAP vulnerability CVE-2022-34851 Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.1; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1; 17.0.0 |
| CVE-2022-28859 | 6.5 | May 5 | On F5 BIG-IP 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6, when installing Net HSM, the scripts (nethsm-safenet-install.sh and nethsm-thales-install.sh)… Affected: 14.1.0; 14.1.2; 14.1.3; 14.1.4; 15.1.0; 15.1.1; +7 more |
| CVE-2022-23023 | 6.5 | Jan 25 | On BIG-IP version 16.1.x before 16.1.2.1, 15.1.x before 15.1.5, 14.1.x before 14.1.4.5, and all versions of 13.1.x and 12.1.x, and BIG-IQ all versions of 8.x and 7.x, undisclosed… Affected: 12.1.0 through 12.1.5; 13.1.0 through 13.1.4; 14.1.0 through 14.1.4; 15.1.0 through 15.1.4; 16.1.0 through 16.1.2 |
| CVE-2021-23043 | 6.5 | Sep 14 | On BIG-IP, on all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a directory traversal vulnerability exists in an undisclosed page of the BIG-IP… Affected: 11.6.0 through 11.6.5; 12.1.0 through 12.1.6; 13.1.0 through 13.1.4; 14.1.0 through 14.1.4; 15.1.0 through 15.1.3; 16.0.0 through 16.1.0 |
| CVE-2020-5943 | 6.5 | Nov 5 | In versions 14.1.0-14.1.0.1 and 14.1.2.5-14.1.2.7, when a BIG-IP object is created or listed through the REST interface, the protected fields are obfuscated in the REST response,… Affected: 14.1.0 through 14.1.0.1; 14.1.2.5 through 14.1.2.7 |
| CVE-2020-5938 | 6.5 | Oct 29 | On BIG-IP 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, when negotiating IPSec tunnels with configured, authenticated peers, the peer may negotiate a different key length… Affected: 11.6.1 through 11.6.5.2; 12.1.0 through 12.1.5.2; 13.1.0 through 13.1.3.4 |
| CVE-2019-6662 | 6.5 | Nov 15 | On BIG-IP 13.1.0-13.1.1.4, sensitive information is logged into the local log files and/or remote logging targets when restjavad processes an invalid request Affected: 13.1.0 before 13.1.1.5 |
| CVE-2019-6641 | 6.5 | Jul 3 | On BIG-IP 12.1.0-12.1.4.1, undisclosed requests can cause iControl REST processes to crash Affected: 12.1.2 through 12.1.4 |
| CVE-2019-6638 | 6.5 | Jul 3 | On BIG-IP 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, Malformed http requests made to an undisclosed iControl REST endpoint can lead to infinite loop of the restjavad process Affected: 14.0.0 before 14.0.0.5; 14.1.0 before 14.1.0.6 |
| CVE-2019-6634 | 6.5 | Jul 3 | On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, a high volume of malformed analytics report requests leads to instability in restjavad process Affected: 12.1.0 before 12.1.4.1; 13.0.0 before 13.1.1.5; 14.0.0 before 14.0.0.5; 14.1.0 before 14.1.0.6 |
| CVE-2019-6617 | 6.5 | May 3 | On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, a user with the Resource Administrator role is able to overwrite sensitive low-level… Affected: 11.5.2 before 11.5.9; 11.6.1 before 11.6.4; 12.1.0 before 12.1.4.1; 13.0.0 before 13.1.1.5; 14.0.0 before 14.1.0.2 |
| CVE-2019-6614 | 6.5 | May 3 | On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, internal methods used to prevent arbitrary file overwrites in Appliance Mode were not fully effective Affected: 12.1.0 before 12.1.4.1; 13.0.0 before 13.1.1.5; 14.0.0 before 14.1.0.2 |
| CVE-2018-15322 | 6.5 | Oct 31 | On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.2, or 11.2.1-11.5.6, BIG-IQ Centralized Management 6.0.0-6.0.1, 5.0.0-5.4.0 or 4.6.0, BIG-IQ Cloud and… Affected: 11.2.1 through 11.5.6; 11.6.0 through 11.6.3.2; 12.1.0 through 12.1.3.5; 13.0.0 through 13.1.0.7; 14.0.0 through 14.0.0.2 |
| CVE-2017-6158 | 6.5 | Apr 13 | In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling of invalid IP addresses Affected: 11.5.1 through 11.5.5; 11.6.0 through 11.6.1; 12.0.0 through 12.1.2; 11.2.1 |
| CVE-2017-6134 | 6.5 | Dec 21 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, 12.1.0 - 12.1.2 and 11.5.1 - 11.6.1, an undisclosed sequence… Affected: 11.5.1 through 11.6.1; 12.1.0 through 12.1.2; 13.0.0 |
| CVE-2017-6156 | 6.4 | Apr 13 | When the F5 BIG-IP 12.1.0-12.1.1, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 system is configured with a wildcard IPSec tunnel endpoint, it may allow a remote attacker to disrupt or… Affected: 11.5.1 through 11.5.5; 12.1.0 through 12.1.1; 11.2.1; 11.6.1 |
| CVE-2025-59269 | 6.1 | Oct 15 | BIG-IP Configuration utility XSS vulnerability Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1 |
| CVE-2024-33604 | 6.1 | May 8 | A reflected cross-site scripting (XSS) vulnerability exist in undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the… Affected: 15.1.0 before 15.1.10.4; 16.1.0 before 16.1.4.3; 17.1.0 before 17.1.1.3 |
| CVE-2023-3470 | 6.1 | Aug 2 | Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards generate a deterministic password for the Crypto User account Affected: 13.1.0 before 13.1.4; 14.1.0 before 14.1.4; 15.1.0 |
| CVE-2023-38138 | 6.1 | Aug 2 | A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which allows an attacker to run JavaScript in the context of… Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.5; 15.1.0 before 15.1.9.1; 16.1.0 before 16.1.3.5; 17.0.0 before 17.1.0.2 |
| CVE-2023-27378 | 6.1 | May 3 | Multiple reflected cross-site scripting (XSS) vulnerabilities exist in undisclosed pages of the BIG-IP Configuration utility which allow an attacker to run JavaScript in the… Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.4; 15.1.0 before 15.1.8.2; 16.1.0 before 16.1.3.4; 17.0.0 before 17.1.0.1 |
| CVE-2023-22418 | 6.1 | Feb 1 | On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.7, 14.1.x before 14.1.5.3, and all versions of 13.1.x, an open redirect vulnerability exists on… Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.3; 15.1.0 before 15.1.7; 16.1.0 before 16.1.3.3; 17.0.0 before 17.0.0.2 |
| CVE-2021-23027 | 6.1 | Sep 14 | On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, and 14.1.x before 14.1.4.3, a DOM based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the… Affected: 14.1.0 through 14.1.4; 15.1.0 through 15.1.3; 16.0.0 through 16.0.1.1 |
| CVE-2021-23041 | 6.1 | Sep 14 | On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x, a DOM based cross-site scripting (XSS)… Affected: 12.1.0 through 12.1.6; 13.1.0 before 13.1.4.1; 14.1.0 before 14.1.4.2; 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.2 |
| CVE-2021-22994 | 6.1 | Mar 31 | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, undisclosed… Affected: 11.6.1 before 11.6.5.3; 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.4; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1 |
| CVE-2021-22979 | 6.1 | Feb 12 | On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.2.8, 13.1.x before 13.1.3.5, and all 12.1.x versions, a reflected Cross-Site Scripting (XSS)… Affected: 12.1.0 through 12.1.5; 13.1.0 before 13.1.3.5; 14.1.0 before 14.1.2.8; 15.1.0 before 15.1.1; 16.0.0 before 16.0.1 |
| CVE-2020-27719 | 6.1 | Dec 24 | On BIG-IP 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, a cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility Affected: 14.1.0 before 14.1.3.1; 15.0.0 before 15.1.1; 16.0.0 before 16.0.1 |
| CVE-2020-5915 | 6.1 | Aug 26 | In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, an undisclosed TMUI page contains a vulnerability… Affected: 11.6.1 before 11.6.5.2; 12.1.0 before 12.1.5.2; 13.1.0 before 13.1.3.4; 14.1.0 before 14.1.2.5; 15.0.0 before 15.0.1.4; 15.1.0 before 15.1.0.5 |
| CVE-2020-5903 | 6.1 | Jul 1 | In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, a Cross-Site Scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP… Affected: 12.1.0 through 12.1.5; 13.1.0 through 13.1.3; 14.1.0 through 14.1.2; 15.0.0 through 15.1.0 |
| CVE-2019-6657 | 6.1 | Nov 1 | On BIG-IP 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, a reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Traffic Management… Affected: 11.5.2 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3 |
| CVE-2019-6626 | 6.1 | Jul 3 | On BIG-IP (AFM, Analytics, ASM) 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.3.4, A reflected cross-site scripting (XSS) vulnerability exists… Affected: 11.5.1 through 11.6.3; 12.1.0 before 12.1.4.1; 13.0.0 before 13.1.1.5; 14.0.0 before 14.0.0.5; 14.1.0 before 14.1.0.6 |
| CVE-2019-6625 | 6.1 | Jul 3 | On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.4, a reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page… Affected: 11.5.1 through 11.6.3; 12.1.0 before 12.1.4.1; 13.0.0 before 13.1.1.5; 14.0.0 before 14.0.0.5; 14.1.0 before 14.1.0.6 |
| CVE-2019-6600 | 6.1 | Mar 13 | In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when remote authentication is enabled for administrative users and all external… Affected: 11.5.1 through 11.5.8; 11.6.1 through 11.6.3.2; 12.1.0 through 12.1.3.7; 13.0.0 through 13.1.1.3; 14.0.0 through 14.0.0.2 |
| CVE-2019-8331 | 6.1 | Feb 20 | In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute Affected: 12.1.0 before 12.1.5.1; 13.0.0 before 13.1.3.4; 14.0.0 before 14.1.2.5; 15.0.0 before 15.1.0 |
| CVE-2019-6589 | 6.1 | Feb 14 | On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, and 11.6.0-11.6.3.2, a reflected Cross Site Scripting (XSS) vulnerability is present in an undisclosed page of the… Affected: 11.6.0 through 11.6.3.2; 12.1.0 through 12.1.3.7; 13.0.0 through 13.1.1.3; 14.0.0 through 14.0.0.2 |
| CVE-2018-15315 | 6.1 | Oct 19 | On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a reflected Cross Site Scripting (XSS) vulnerability in an undisclosed Configuration Utility page Affected: 12.1.0 through 12.1.3.6; 13.0.0 through 13.1.1.1 |
| CVE-2018-15314 | 6.1 | Oct 19 | On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page Affected: 12.1.0 through 12.1.3.6; 13.0.0 through 13.1.1.1 |
| CVE-2018-15313 | 6.1 | Oct 19 | On F5 BIG-IP AFM 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, there is a Reflected Cross Site Scripting vulnerability in undisclosed TMUI page Affected: 12.1.0 through 12.1.3.6; 13.0.0 through 13.1.1.1 |
| CVE-2018-15312 | 6.1 | Oct 19 | On F5 BIG-IP 13.0.0-13.1.1.1 and 12.1.0-12.1.3.6, a reflected Cross-Site Scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that… Affected: 12.1.0 through 12.1.3.6; 13.0.0 through 13.1.1.1 |
| CVE-2018-5521 | 6.1 | Jun 1 | On F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, carefully crafted URLs can be used to reflect arbitrary content into GeoIP lookup responses, potentially… Affected: 11.5.1 through 11.5.5; 11.6.1 through 11.6.3; 12.1.0 through 12.1.3; 11.2.1 |
| CVE-2024-23976 | 6.0 | Feb 14 | When running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance mode restrictions utilizing iAppsLX templates on a BIG-IP… Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0 |
| CVE-2025-58153 | 5.9 | Oct 15 | BIG-IP HSB vulnerability Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.5.0 |
The 500 most important CVEs for this product (exploited first, then by severity)