BA
Product
Big-ip Analytics
On CISA KEVExploited in the wildRansomware-linked
510
CVEs
11
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 34High 277Medium 176Low 4
Watch
Add Big-ip Analytics to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-35272 | 5.5 | Aug 4 | BIG-IP HTTP MRF vulnerability CVE-2022-35272 Affected: 16.1.0 before 16.1.3.1; 17.0.0 |
| CVE-2020-5890 | 5.5 | Apr 30 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1 and BIG-IQ 5.2.0-7.1.0, when creating a QKView, credentials for binding to LDAP servers used for… Affected: 12.1.0 through 12.1.5.1; 13.1.0 through 13.1.3.3; 14.0.0 before 14.1.2.4; 15.0.0 before 15.1.0.2 |
| CVE-2019-19151 | 5.5 | Dec 23 | On BIG-IP versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IQ versions 7.0.0, 6.0.0-6.1.0, and 5.0.0-5.4.0, iWorkflow version… Affected: 11.5.1 through 11.6.5; 12.1.0 through 12.1.5; 13.0.0 through 13.1.3; 14.0.0 through 14.1.2; 15.0.0 through 15.1.0 |
| CVE-2019-6663 | 5.5 | Nov 15 | The BIG-IP 15.0.0-15.0.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager… Affected: 11.5.2 through 11.6.5; 12.1.0 through 12.1.5; 13.0.0 through 13.1.3; 14.0.0 through 14.1.2; 15.0.0 through 15.0.1 |
| CVE-2019-6632 | 5.5 | Jul 3 | On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, under certain circumstances, attackers can decrypt configuration items that are encrypted because… Affected: 12.1.0 before 12.1.4.1; 13.0.0 before 13.1.1.5; 14.0.0 before 14.0.0.5; 14.1.0 before 14.1.0.6 |
| CVE-2018-15333 | 5.5 | Dec 28 | On versions 11.2.1. and greater, unrestricted Snapshot File Access allows BIG-IP system's user with any role, including Guest Role, to have access and download previously… Affected: 11.2.1 through 11.6.3; 12.1.0 through 12.1.4; 13.0.0 through 13.1.1; 14.0.0 through 14.1.0 |
| CVE-2016-7474 | 5.5 | Mar 27 | In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain normally… Affected: 11.2.1; 11.4.0; 11.4.1; 11.5.0; 11.5.1; 11.5.2; +7 more |
| CVE-2026-40703 | 5.4 | May 13 | BIG-IP Configuration utility CSRF vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6 |
| CVE-2023-38423 | 5.4 | Aug 2 | A cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the… Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.5; 15.1.0 before 15.1.9.1; 16.1.0 before 16.1.3.5; 17.0.0 before 17.1.0.2 |
| CVE-2022-28707 | 5.4 | May 5 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, and 14.1.x versions prior to 14.1.4.6, a stored cross-site scripting (XSS) vulnerability exists… Affected: 14.1.0; 14.1.2; 14.1.3; 14.1.4; 15.1.0; 15.1.1; +8 more |
| CVE-2020-5940 | 5.4 | Nov 5 | In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.3, a stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Traffic Management… Affected: 14.1.0 before 14.1.2.4; 15.1.0 before 15.1.1; 16.0.0 before 16.0.1 |
| CVE-2020-5923 | 5.4 | Aug 26 | In BIG-IP versions 15.0.0-15.1.0.4, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1 and BIG-IQ versions 5.4.0-7.0.0, Self-IP port-lockdown bypass via IPv6… Affected: 11.6.1 before 11.6.5.2; 12.1.0 before 12.1.5.2; 13.1.0 before 13.1.3.4; 14.1.0 before 14.1.2.7; 15.0.0 before 15.1.0.5 |
| CVE-2018-5518 | 5.4 | May 2 | On F5 BIG-IP 13.0.0-13.1.0.5 or 12.0.0-12.1.3.3, malicious root users with access to a VCMP guest can cause a disruption of service on adjacent VCMP guests running on the same… Affected: 12.0.0 through 12.1.3; 13.0.0 through 13.1.0 |
| CVE-2016-7469 | 5.4 | Jun 9 | A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link… Affected: 11.2.1; 11.4.0; 11.4.1; 11.5.0; 11.5.1; 11.5.2; +8 more |
| CVE-2026-34019 | 5.3 | May 13 | BIG-IP BFD vulnerability Affected: 17.1.0 through 17.1.2; 17.5.0; 16.1.0 through 16.1.6 |
| CVE-2026-40435 | 5.3 | May 13 | BIG-IP httpd access control vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6 |
| CVE-2025-59268 | 5.3 | Oct 15 | On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated remote attacker through the Configuration… Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1 |
| CVE-2025-58424 | 5.3 | Oct 15 | On BIG-IP systems, undisclosed traffic can cause data corruption and unauthorized data modification in protocols which do not have message integrity protection. Note: Software… Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6; 17.1.0 through 17.1.2 |
| CVE-2025-54500 | 5.3 | Aug 13 | An HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit (HTTP/2 MadeYouReset… Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 before 17.5.1.2 |
| CVE-2023-24594 | 5.3 | May 3 | When an SSL profile is configured on a Virtual Server, undisclosed traffic can cause an increase in CPU or SSL accelerator resource utilization. Note: Software versions which… Affected: 14.1.5; 15.1.4.1; 16.1.2 |
| CVE-2022-29480 | 5.3 | May 5 | On F5 BIG-IP 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when multiple route domains are configured, undisclosed requests to big3d can cause an… Affected: 11.6.1; 11.6.2; 11.6.3; 11.6.4; 11.6.5; 12.1.0; +25 more |
| CVE-2022-29479 | 5.3 | May 5 | On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ… Affected: 11.6.1; 11.6.2; 11.6.3; 11.6.4; 11.6.5; 12.1.0; +25 more |
| CVE-2022-27182 | 5.3 | May 5 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, and 14.1.x versions prior to 14.1.4.6, when BIG-IP packet filters are enabled and a virtual… Affected: 14.1.0; 14.1.2; 14.1.3; 14.1.4; 15.1.0; 15.1.1; +7 more |
| CVE-2022-26130 | 5.3 | May 5 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when an Active… Affected: 13.1.0; 13.1.1; 13.1.3; 13.1.4; 13.1.5; 14.1.0; +12 more |
| CVE-2022-23030 | 5.3 | Jan 25 | On version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when the BIG-IP Virtual Edition (VE) uses the ixlv driver (which is… Affected: 13.1.0 through 13.1.4; 14.1.0 through 14.1.4; 15.1.0 through 15.1.4; 16.1.0 through 16.1.1 |
| CVE-2022-23029 | 5.3 | Jan 25 | On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a FastL4 profile is configured on a… Affected: 11.6.1 through 11.6.5; 12.1.0 through 12.1.6; 13.1.0 through 13.1.4; 14.1.0 through 14.1.4; 15.1.0 through 15.1.4 |
| CVE-2022-23027 | 5.3 | Jan 25 | On BIG-IP versions 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, 13.1.x beginning in 13.1.3.6, 12.1.5.3-12.1.6, and 11.6.5.2, when a FastL4 profile and an HTTP, FIX, and/or hash… Affected: 12.1.5.3 through 12.1.6; 13.1.3.6 through 13.1.4; 14.1.0 through 14.1.4; 15.1.0 through 15.1.3 |
| CVE-2021-23007 | 5.3 | Mar 31 | On BIG-IP versions 14.1.4 and 16.0.1.1, when the Traffic Management Microkernel (TMM) process handles certain undisclosed traffic, it may start dropping all fragmented IP traffic Affected: 14.1.4; 16.0.1.1 |
| CVE-2021-22998 | 5.3 | Mar 31 | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, SYN flood… Affected: 11.6.1 before 11.6.5.3; 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.4; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1 |
| CVE-2014-5209 | 5.3 | Jan 8 | An Information Disclosure vulnerability exists in NTP 4.2.7p25 private (mode 6/7) messages via a GET_RESTRICT control message, which could let a malicious user obtain sensitive… Affected: 11.4.0 through 11.6.4; 12.0.0 through 12.1.4; 13.0.0 through 13.1.1; 14.0.0 through 14.1.0; 11.2.1; 15.0.0 |
| CVE-2019-6678 | 5.3 | Dec 23 | On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, the TMM process may restart when the packet filter feature is enabled Affected: 13.1.0 before 13.1.3.2; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.2.3; 15.0.0 before 15.0.1.1 |
| CVE-2019-6655 | 5.3 | Sep 25 | On versions 13.0.0-13.1.0.1, 12.1.0-12.1.4.1, 11.6.1-11.6.4, and 11.5.1-11.5.9, BIG-IP platforms where AVR, ASM, APM, PEM, AFM, and/or AAM is provisioned may leak sensitive data Affected: 11.5.2 through 11.5.9; 11.6.1 through 11.6.4; 12.1.0 through 12.1.4.1; 13.0.0 through 13.1.0.1 |
| CVE-2019-6651 | 5.3 | Sep 25 | In BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.5.1-11.6.4, BIG-IQ 7.0.0, 6.0.0-6.1.0,5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager… Affected: 11.5.1 through 11.6.4; 12.1.0 through 12.1.4.1; 13.0.0 through 13.1.1.5; 14.0.0 through 14.0.0.5; 14.1.0 through 14.1.0.6; 15.0.0 |
| CVE-2019-6647 | 5.3 | Sep 4 | On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, when processing authentication attempts for control-plane users MCPD leaks a small… Affected: 11.5.1 through 11.6.4; 12.1.0 through 12.1.4; 13.0.0 through 13.1.1; 14.0.0; 14.1.0 |
| CVE-2019-6640 | 5.3 | Jul 3 | On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.1-11.5.8, SNMP exposes sensitive configuration objects over insecure… Affected: 11.5.1 before 11.5.9; 11.6.1 before 11.6.4; 12.1.0 before 12.1.4.1; 13.0.0 before 13.1.1.5; 14.0.0 before 14.0.0.5; 14.1.0 before 14.1.0.6 |
| CVE-2019-6613 | 5.3 | May 3 | On BIG-IP 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, SNMP may expose sensitive configuration objects over insecure transmission channels Affected: 11.5.2 before 11.5.9; 11.6.1 before 11.6.4; 12.1.0 before 12.1.4.1; 13.0.0 before 13.1.1.5 |
| CVE-2018-5532 | 5.3 | Jul 19 | On F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.2.1-11.5.6 a domain name cached within the DNS Cache of TMM may continue to be resolved by the cache even after the… Affected: 11.2.1 through 11.5.6; 11.6.0 through 11.6.3.1; 12.1.0 through 12.1.2; 13.0.0 |
| CVE-2018-5524 | 5.3 | Jun 1 | Under certain conditions, on F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.1, or 11.6.1 HF2-11.6.3.1, virtual servers configured with Client SSL or Server SSL profiles which make use… Affected: 11.6.1 through 11.6.3; 12.1.0 through 12.1.3; 13.0.0 through 13.0.1 |
| CVE-2017-6153 | 5.3 | Jun 1 | Features in F5 BIG-IP 13.0.0-13.1.0.3, 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1 system that utilizes inflate functionality directly, via an iRule, or via the… Affected: 11.5.1 through 11.5.5; 11.6.1 through 11.6.3; 12.1.0 through 12.1.3; 11.2.1; 13.0.0; 13.1.0 |
| CVE-2016-6249 | 5.3 | Feb 20 | F5 BIG-IP 12.0.0 and 11.5.0 - 11.6.1 REST requests which timeout during user account authentication may log sensitive attributes such as passwords in plaintext to… Affected: 11.5.0; 11.5.1; 11.5.2; 11.5.3; 11.5.4; 11.6.0; +2 more |
| CVE-2026-42063 | 4.9 | May 13 | iControl SOAP vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0 |
| CVE-2026-41954 | 4.9 | May 13 | iControl REST and tmsh vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 21.0.0; 16.1.0 through 16.1.6 |
| CVE-2025-54755 | 4.9 | Oct 15 | A directory traversal vulnerability exists in TMUI that allows a highly privileged authenticated attacker to access files which are not limited to the intended files. Note:… Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1 |
| CVE-2023-22326 | 4.9 | Feb 1 | In BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, and all versions of BIG-IQ 8.x and… Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.3; 15.1.0 before 15.1.8.1; 16.1.0 before 16.1.3.3; 17.0.0 before 17.0.0.2 |
| CVE-2022-41694 | 4.9 | Oct 19 | BIG-IP and BIG-IQ mcpd vulnerability CVE-2022-41694 Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3 |
| CVE-2022-33968 | 4.9 | Aug 4 | BIG-IP LTM and APM NTLM vulnerability CVE-2022-33968 Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.1; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1; 17.0.0 |
| CVE-2022-26835 | 4.9 | May 5 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x… Affected: 11.6.1; 11.6.2; 11.6.3; 11.6.4; 11.6.5; 12.1.0; +25 more |
| CVE-2022-26340 | 4.9 | May 5 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x… Affected: 11.6.1; 11.6.2; 11.6.3; 11.6.4; 11.6.5; 12.1.0; +25 more |
| CVE-2020-27727 | 4.9 | Dec 24 | On BIG-IP version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, when an authenticated administrative user installs RPMs using the iAppsLX REST installer,… Affected: 13.1.0 before 13.1.3.5; 14.1.0 before 14.1.3.1; 15.0.0 before 15.1.1; 16.0.0 before 16.0.1.1 |
| CVE-2019-6618 | 4.9 | May 3 | On BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8, users with the Resource Administrator role can modify sensitive portions of the… Affected: 11.5.2 through 11.5.8; 11.6.1 through 11.6.3.4; 12.1.0 through 12.1.4; 13.0.0 through 13.1.1.4; 14.0.0 through 14.1.0.1 |
The 500 most important CVEs for this product (exploited first, then by severity)