BA
Product
Big-ip Advanced Web Application Firewall
On CISA KEVExploited in the wildRansomware-linked
195
CVEs
6
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 10High 119Medium 63Low 3
Watch
Add Big-ip Advanced Web Application Firewall to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-46747 RansomwareIn wildKEV | 9.8 | Oct 26 | BIG-IP Configuration utility unauthenticated remote code execution vulnerability Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 through 15.1.10; 16.1.0 through 16.1.4; 17.1.0 through 17.1.1 |
| CVE-2021-22991 In wildKEV | 9.8 | Mar 31 | F5 BIG-IP Traffic Management Microkernel Buffer Overflow Affected: 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.4; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1 |
| CVE-2021-22986 RansomwareIn wildKEV | 9.8 | Mar 31 | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability Affected: 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.4; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1 |
| CVE-2020-5902 RansomwareIn wildKEV | 9.8 | Jul 1 | F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability Affected: 11.6.1 before 11.6.5.2; 12.1.0 before 12.1.5.2; 13.1.0 before 13.1.3.4; 14.1.0 before 14.1.2.6; 15.0.0 before 15.0.1.4; 15.1.0 before 15.1.0.4 |
| CVE-2023-46748 In wildKEV | 8.8 | Oct 26 | BIG-IP Configuration utility authenticated SQL injection vulnerability Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 through 15.1.10; 16.1.0 through 16.1.4; 17.1.0 through 17.1.1 |
| CVE-2023-44487 In wildKEV | 7.5 | Oct 10 | HTTP/2 Rapid Reset Attack Vulnerability Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 through 15.1.10; 16.1.0 through 16.1.4; 17.1.0 |
Showing 6