BA
Product
Big-ip Application Security Manager
On CISA KEVExploited in the wildRansomware-linked
580
CVEs
11
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 39High 322Medium 139Low 0
Watch
Add Big-ip Application Security Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-46747 RansomwareIn wildKEV | 9.8 | Oct 26 | BIG-IP Configuration utility unauthenticated remote code execution vulnerability Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 through 15.1.10; 16.1.0 through 16.1.4; 17.1.0 through 17.1.1 |
| CVE-2022-1388 RansomwareIn wildKEV | 9.8 | May 5 | F5 BIG-IP Missing Authentication Vulnerability Affected: 11.6.1 through 11.6.5; 12.1.0 through 12.1.6; 13.1.0 before 13.1.5; 14.1.0 before 14.1.4.6; 15.1.0 before 15.1.5.1; 16.1.0 before 16.1.2.2 |
| CVE-2021-22991 In wildKEV | 9.8 | Mar 31 | F5 BIG-IP Traffic Management Microkernel Buffer Overflow Affected: 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.4; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1 |
| CVE-2021-22986 RansomwareIn wildKEV | 9.8 | Mar 31 | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability Affected: 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.4; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1 |
| CVE-2020-5902 RansomwareIn wildKEV | 9.8 | Jul 1 | F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability Affected: 11.6.1 before 11.6.5.2; 12.1.0 before 12.1.5.2; 13.1.0 before 13.1.3.4; 14.1.0 before 14.1.2.6; 15.0.0 before 15.0.1.4; 15.1.0 before 15.1.0.4 |
| CVE-2014-7169 In wildKEV | 9.8 | Sep 25 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 10.0.0 through 10.2.4; 11.0.0 through 11.5.1; 11.6.0 |
| CVE-2014-6271 In wildKEV | 9.8 | Sep 24 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 10.0.0 through 10.2.4; 11.0.0 through 11.5.1; 11.6.0 |
| CVE-2023-46748 In wildKEV | 8.8 | Oct 26 | BIG-IP Configuration utility authenticated SQL injection vulnerability Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 through 15.1.10; 16.1.0 through 16.1.4; 17.1.0 through 17.1.1 |
| CVE-2018-14634 In wildKEV | 7.8 | Sep 25 | Linux Kernel Integer Overflow Vulnerability Affected: 11.2.1 before 11.6.4; 12.1.0 before 12.1.5; 13.0.0 before 13.1.1.5; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.0.6 |
| CVE-2023-44487 In wildKEV | 7.5 | Oct 10 | HTTP/2 Rapid Reset Attack Vulnerability Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 through 15.1.10; 16.1.0 through 16.1.4; 17.1.0 |
| CVE-2014-0196 In wildKEV | 5.5 | May 7 | Linux Kernel Race Condition Vulnerability Affected: 11.1.0 through 11.5.1 |
Showing 11
The 500 most important CVEs for this product (exploited first, then by severity)