BA
Product
BIG-IP APM
On CISA KEVExploited in the wild
7
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 1Low 0
Watch
Add BIG-IP APM to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-94127 In wildKEV | 9.8 | Sep 22 | BIG-IP APM OAuth vulnerability Affected: All versions, or not specified |
| CVE-2022-29263 | 7.8 | May 5 | On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of… Affected: 12.1.x; 11.6.x; 16.1.x before 16.1.2.2; 15.1.x before 15.1.5.1; 14.1.x before 14.1.4.6; 13.1.x before 13.1.5 |
| CVE-2022-31473 | 7.7 | Aug 4 | BIG-IP APM Appliance mode vulnerability CVE-2022-31473 Affected: 15.1.x before 15.1.4; 16.1.x before 16.1.1 |
| CVE-2022-35245 | 7.5 | Aug 4 | BIG-IP APM access policy vulnerability CVE-2022-35245 Affected: 14.1.x before 14.1.5.1; 15.1.x before 15.1.6.1; 16.1.x before 16.1.3.1 |
| CVE-2022-33203 | 7.5 | Aug 4 | BIG-IP APM and F5 SSL Orchestrator vulnerability CVE-2022-33203 Affected: 14.1.x before 14.1.5; 15.1.x before 15.1.6.1; 16.1.x before 16.1.3 |
| CVE-2017-6168 | 7.4 | Nov 17 | On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (fixed in 13.0.0 HF3) a virtual server configured with a… Affected: 11.6.0 through 11.6.2; 12.0.0 through 12.1.2; 13.0.0 |
| CVE-2017-6166 | 5.9 | Nov 22 | In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel (TMM) may crash… Affected: 12.0.0 through 12.1.1 |
Showing 7