BA
Product
Big-ip Application Acceleration Manager
On CISA KEVExploited in the wildRansomware-linked
523
CVEs
11
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 34High 290Medium 176Low 0
Watch
Add Big-ip Application Acceleration Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-22842 | 7.5 | Feb 1 | On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type… Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.3; 15.1.0 before 15.1.8.1; 16.1.0 before 16.1.3.3 |
| CVE-2023-22664 | 7.5 | Feb 1 | On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, and BIG-IP SPK starting in version 1.6.0, when a client-side HTTP/2 profile and the HTTP MRF Router option… Affected: 16.1.0 before 16.1.3.3; 17.0.0 before 17.0.0.2 |
| CVE-2023-22422 | 7.5 | Feb 1 | On BIG-IP versions 17.0.x before 17.0.0.2 and 16.1.x before 16.1.3.3, when a HTTP profile with the non-default Enforcement options of Enforce HTTP Compliance and Unknown Methods:… Affected: 16.1.0 before 16.1.3.3; 17.0.0 before 17.0.0.2 |
| CVE-2023-22340 | 7.5 | Feb 1 | On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a SIP profile is configured on a Message Routing type… Affected: 13.1.0 through 13.1.5; 15.1.0 before 15.1.8; 16.1.0 before 16.1.3.3; 17.0.0 before 17.0.0.2 |
| CVE-2023-22323 | 7.5 | Feb 1 | In BIP-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when OCSP authentication profile is… Affected: 13.1.0 through 13.1.5; 15.1.0 before 15.1.8.1; 16.1.0 before 16.1.3.3; 17.0.0 before 17.0.0.2 |
| CVE-2022-41833 | 7.5 | Oct 19 | BIG-IP iRule vulnerability CVE-2022-41833 Affected: 13.1.0 through 13.1.5 |
| CVE-2022-41832 | 7.5 | Oct 19 | BIG-IP SIP vulnerability CVE-2022-41832 Affected: 13.1.0 before 13.1.5.1; 14.1.0 before 14.1.5.1; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1; 17.0.0 before 17.0.0.1 |
| CVE-2022-41624 | 7.5 | Oct 19 | BIG-IP iRules vulnerability CVE-2022-41624 Affected: 13.1.0 before 13.1.5.1; 14.1.0 before 14.1.5.2; 15.1.0 before 15.1.7; 16.1.0 before 16.1.3.2; 17.0.0 before 17.0.0.1 |
| CVE-2022-36795 | 7.5 | Oct 19 | BIG-IP software SYN cookies vulnerability CVE-2022-36795 Affected: 14.1.0 before 14.1.5.1; 15.1.0 before 15.1.7; 16.1.0 before 16.1.3.1; 17.0.0 before 17.0.0.1 |
| CVE-2022-35240 | 7.5 | Aug 4 | BIG-IP Message Routing MQTT vulnerability CVE-2022-35240 Affected: 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.2.2 |
| CVE-2022-35236 | 7.5 | Aug 4 | HTTP2 profile vulnerability CVE-2022-35236 Affected: 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.2.2 |
| CVE-2022-34862 | 7.5 | Aug 4 | TMM vulnerability CVE-2022-34862 Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1 |
| CVE-2022-34844 | 7.5 | Aug 4 | BIG-IP and BIG-IQ AWS vulnerability CVE-2022-34844 Affected: 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1 |
| CVE-2022-34655 | 7.5 | Aug 4 | TMM vulnerability CVE-2022-34655 Affected: 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.0.0 before 16.0.1.1 |
| CVE-2022-34651 | 7.5 | Aug 4 | BIG-IP TLS 1.3 iRule vulnerability CVE-2022-34651 Affected: 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1 |
| CVE-2022-32455 | 7.5 | Aug 4 | TMM vulnerability CVE-2022-32455 Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.2.2 |
| CVE-2022-29473 | 7.5 | May 5 | On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when an IPSec ALG profile is configured on a virtual… Affected: 13.1.0; 13.1.1; 13.1.3; 13.1.4; 13.1.5; 14.1.0; +12 more |
| CVE-2022-28706 | 7.5 | May 5 | On F5 BIG-IP 16.1.x versions prior to 16.1.2 and 15.1.x versions prior to 15.1.5.1, when the DNS resolver configuration is used, undisclosed requests can cause the Traffic… Affected: 15.1.0; 15.1.1; 15.1.2; 15.1.3; 15.1.4; 15.1.5; +3 more |
| CVE-2022-28705 | 7.5 | May 5 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, on platforms with an… Affected: 13.1.0; 13.1.1; 13.1.3; 13.1.4; 13.1.5; 14.1.0; +13 more |
| CVE-2022-28701 | 7.5 | May 5 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, when the stream profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource… Affected: 16.1.0; 16.1.1; 16.1.2 |
| CVE-2022-28691 | 7.5 | May 5 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when a Real Time Streaming… Affected: 13.1.0; 13.1.1; 13.1.3; 13.1.4; 13.1.5; 14.1.0; +13 more |
| CVE-2022-27189 | 7.5 | May 5 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x… Affected: 11.6.1; 11.6.2; 11.6.3; 11.6.4; 11.6.5; 12.1.0; +25 more |
| CVE-2022-26517 | 7.5 | May 5 | On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when the BIG-IP CGNAT Large Scale NAT (LSN) pool is… Affected: 13.1.0; 13.1.1; 13.1.3; 13.1.4; 13.1.5; 14.1.0; +12 more |
| CVE-2022-26372 | 7.5 | May 5 | On F5 BIG-IP 15.1.x versions prior to 15.1.0.2, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when a DNS listener is… Affected: 11.6.1; 11.6.2; 11.6.3; 11.6.4; 11.6.5; 12.1.0; +25 more |
| CVE-2022-26370 | 7.5 | May 5 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, and 14.1.x versions prior to 14.1.4.6, when a Session Initiation Protocol (SIP) message routing… Affected: 14.1.0; 14.1.2; 14.1.3; 14.1.4; 15.1.0; 15.1.1; +7 more |
| CVE-2022-26071 | 7.5 | May 5 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x… Affected: 11.6.1; 11.6.2; 11.6.3; 11.6.4; 11.6.5; 12.1.0; +25 more |
| CVE-2022-23025 | 7.5 | Jan 25 | On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, when a SIP ALG profile is configured on a virtual server,… Affected: 13.1.0 through 13.1.4; 14.1.0 through 14.1.4; 15.1.0 through 15.1.3; 16.1.0 through 16.1.1 |
| CVE-2022-23022 | 7.5 | Jan 25 | On BIG-IP version 16.1.x before 16.1.2, when an HTTP profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to… Affected: 16.1.0 before 16.1.2 |
| CVE-2022-23021 | 7.5 | Jan 25 | On BIG-IP version 16.1.x before 16.1.2, when any of the following configurations are configured on a virtual server, undisclosed requests can cause the Traffic Management… Affected: 16.1.0 before 16.1.2 |
| CVE-2022-23020 | 7.5 | Jan 25 | On BIG-IP version 16.1.x before 16.1.2, when the 'Respond on Error' setting is enabled on the Request Logging profile and configured on a virtual server, undisclosed requests can… Affected: 16.1.0 before 16.1.2 |
| CVE-2022-23019 | 7.5 | Jan 25 | On BIG-IP version 16.1.x before 16.1.2, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x and 12.1.x, when a message routing type virtual server is… Affected: 12.1.0 through 12.1.6; 13.1.0 through 13.1.4; 14.1.0 before 14.1.4.4; 15.1.0 before 15.1.4.1; 16.1.0 before 16.1.2 |
| CVE-2022-23017 | 7.5 | Jan 25 | On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.5, and all versions of 13.1.x, when a virtual server is configured with a DNS profile with the… Affected: 13.1.0 through 13.1.4; 14.1.0 before 14.1.4.5; 15.1.0 before 15.1.4.1; 16.0.0 before 16.1.0 |
| CVE-2022-23016 | 7.5 | Jan 25 | On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server, undisclosed requests can cause the… Affected: 15.1.0 before 15.1.4.1; 16.1.0 before 16.1.2 |
| CVE-2022-23015 | 7.5 | Jan 25 | On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, and 14.1.2.6-14.1.4.4, when a Client SSL profile is configured on a virtual server with Client Certificate… Affected: 14.1.2.6 before 14.1.4.4; 15.1.0 before 15.1.4.1; 16.0.0 before 16.1.0 |
| CVE-2022-23012 | 7.5 | Jan 25 | On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is configured on a virtual server, undisclosed requests can cause the Traffic… Affected: 14.1.0 before 14.1.4.5; 15.1.0 before 15.1.4.1 |
| CVE-2022-23011 | 7.5 | Jan 25 | On certain hardware BIG-IP platforms, in version 15.1.x before 15.1.4 and 14.1.x before 14.1.3, virtual servers may stop responding while processing TCP traffic due to an issue in… Affected: 14.1.0 before 14.1.3; 15.1.0 before 15.1.4; 14.1.0 before 14.1.3; 15.1.0 before 15.1.4; 14.1.0 before 14.1.3; 15.1.0 before 15.1.4 |
| CVE-2022-23010 | 7.5 | Jan 25 | On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a FastL4 profile and an HTTP profile… Affected: 11.6.0 through 11.6.5; 12.1.0 through 12.1.6; 13.1.0 through 13.1.4; 14.1.0 before 14.1.4.4; 15.1.0 before 15.1.4.1; 16.0.0 before 16.1.0 |
| CVE-2002-20001 | 7.5 | Nov 11 | The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive… Affected: 13.1.0 through 17.1.2; 17.5.0 |
| CVE-2021-23039 | 7.5 | Sep 14 | On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.2.8, and all versions of 13.1.x and 12.1.x, when IPSec is configured on a BIG-IP system, undisclosed… Affected: 12.1.0 through 12.1.6; 13.1.0 through 13.1.4; 14.1.0 before 14.1.2.8; 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.2 |
| CVE-2021-23035 | 7.5 | Sep 14 | On BIG-IP 14.1.x before 14.1.4.4, when an HTTP profile is configured on a virtual server, after a specific sequence of packets, chunked responses can cause the Traffic Management… Affected: 14.1.0 through 14.1.4.4 |
| CVE-2021-23034 | 7.5 | Sep 14 | On BIG-IP version 16.x before 16.1.0 and 15.1.x before 15.1.3.1, when a DNS profile using a DNS cache resolver is configured on a virtual server, undisclosed requests can cause… Affected: 15.1.0 before 15.1.3.1; 16.0.0 before 16.1.0 |
| CVE-2021-23045 | 7.5 | Sep 14 | On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when an SCTP profile with multiple… Affected: 12.1.0 through 12.1.6; 13.1.0 before 13.1.4.1; 14.1.0 before 14.1.4.3; 15.1.0 before 15.1.3.1; 16.0.0 before 16.0.1.2 |
| CVE-2021-23044 | 7.5 | Sep 14 | On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, when the Intel QuickAssist… Affected: 11.6.0 through 11.6.5; 12.1.0 through 12.1.6; 13.1.0 before 13.1.4.1; 14.1.0 before 14.1.4.2; 15.1.0 before 15.1.3.1; 16.0.0 before 16.1.0 |
| CVE-2021-23042 | 7.5 | Sep 14 | On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, and 12.1.x before 12.1.6, when an HTTP profile is configured on a… Affected: 12.1.0 before 12.1.6; 13.1.0 before 13.1.4; 14.1.0 before 14.1.4; 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.2 |
| CVE-2021-23051 | 7.5 | Sep 14 | On BIG-IP versions 15.1.0.4 through 15.1.3, when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) driver is used with BIG-IP on Amazon Web Services (AWS)… Affected: 15.1.0.4 before 15.1.3.1 |
| CVE-2021-23049 | 7.5 | Sep 14 | On BIG-IP version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3, when the iRules RESOLVER::summarize command is used on a virtual server, undisclosed requests can cause an… Affected: 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.2 |
| CVE-2021-23048 | 7.5 | Sep 14 | On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, when GPRS Tunneling… Affected: 11.6.1 through 11.6.5; 12.1.0 through 12.1.6; 13.1.0 before 13.1.4.1; 14.1.0 before 14.1.4.3; 15.1.0 before 15.1.3.1; 16.0.0 before 16.0.1.2 |
| CVE-2021-23009 | 7.5 | May 10 | On BIG-IP version 16.0.x before 16.0.1.1 and 15.1.x before 15.1.3, malformed HTTP/2 requests may cause an infinite loop which causes a Denial of Service for Data Plane traffic Affected: 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.1 |
| CVE-2021-23013 | 7.5 | May 10 | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, the Traffic Management Microkernel (TMM)… Affected: 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.4; 14.1.0 before 14.1.4; 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.1 |
| CVE-2021-23011 | 7.5 | May 10 | On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, when the BIG-IP system is… Affected: 11.6.1 before 11.6.5.3; 12.1.0 before 12.1.6; 13.1.0 before 13.1.4; 14.1.0 before 14.1.4; 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.1 |
The 500 most important CVEs for this product (exploited first, then by severity)