BA
Product
Big-ip Application Security Manager
On CISA KEVExploited in the wildRansomware-linked
580
CVEs
11
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 39High 322Medium 139Low 0
Watch
Add Big-ip Application Security Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-39458 | 7.5 | May 13 | BIG-IP DNS Cache vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0 |
| CVE-2026-39455 | 7.5 | May 13 | BIG-IP Configuration utility vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0 |
| CVE-2026-40060 | 7.5 | May 13 | BIG-IP Advanced WAF and ASM vulnerability Affected: 16.1.0 through 16.1.6; 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 21.0.0 |
| CVE-2026-42409 | 7.5 | May 13 | BIG-IP HTTP/2 vulnerability Affected: 21.0.0; 16.1.0 through 16.1.6; 17.1.0 through 17.1.3; 17.5.0 through 17.5.1 |
| CVE-2026-41227 | 7.5 | May 13 | BIG-IP HTTP/2 Layer 7 Dos Protection vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6 |
| CVE-2026-40618 | 7.5 | May 13 | BIG-IP SSL/TLS vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0 |
| CVE-2026-41956 | 7.5 | May 13 | BIG-IP TMM Vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6 |
| CVE-2026-42920 | 7.5 | May 13 | BIG-IP DTLS Vulnerability Affected: 21.0.0; 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6 |
| CVE-2026-40629 | 7.5 | May 13 | BIG-IP SSL/TLS vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6 |
| CVE-2026-41218 | 7.5 | May 13 | BIG-IP PEM iRules vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0 |
| CVE-2025-61990 | 7.5 | Oct 15 | TMM vulnerability Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 before 17.5.1.3 |
| CVE-2025-58071 | 7.5 | Oct 15 | BIG-IP IPSec vulnerability Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 |
| CVE-2025-61935 | 7.5 | Oct 15 | BIG-IP Advanced WAF and ASM vulnerability Affected: 15.1.0 before 15.1.10.8; 17.1.0 before 17.1.3; 17.5.0 |
| CVE-2025-58096 | 7.5 | Oct 15 | BIG-IP TMM vulnerability Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1 |
| CVE-2025-54858 | 7.5 | Oct 15 | BIG-IP Advanced WAF and ASM vulnerability Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 before 17.5.1.3 |
| CVE-2025-61951 | 7.5 | Oct 15 | BIG-IP DTLS 1.2 Vulnerability Affected: 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 |
| CVE-2025-53856 | 7.5 | Oct 15 | TMM vulnerability Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1 |
| CVE-2025-61938 | 7.5 | Oct 15 | BIG-IP Advanced WAF and ASM bd process vulnerability Affected: 17.1.0 before 17.1.3; 17.5.0 |
| CVE-2025-59781 | 7.5 | Oct 15 | BIG-IP DNS cache vulnerability Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2 |
| CVE-2025-46706 | 7.5 | Oct 15 | BIG-IP iRules vulnerability Affected: 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2 |
| CVE-2025-55669 | 7.5 | Oct 15 | BIG-IP HTTP/2 vulnerability Affected: 16.1.0 before 16.1.6; 17.1.0 through 17.1.2 |
| CVE-2025-48008 | 7.5 | Oct 15 | BIG-IP MPTCP vulnerability Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6 |
| CVE-2025-53474 | 7.5 | Oct 15 | BIG-IP iRules vulnerability Affected: 15.1.0 before 15.1.1.0.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1 |
| CVE-2025-52585 | 7.5 | Aug 13 | When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman (ADH) ciphers enabled, undisclosed requests can… Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2 |
| CVE-2025-41433 | 7.5 | May 7 | When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed… Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2 |
| CVE-2025-41431 | 7.5 | May 7 | When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standby BIG-IP systems in… Affected: 17.1.2 |
| CVE-2025-41414 | 7.5 | May 7 | When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of… Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2 |
| CVE-2025-41399 | 7.5 | May 7 | When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note:… Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0 |
| CVE-2025-36557 | 7.5 | May 7 | When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to… Affected: 16.1.0 before 16.1.5; 17.1.0 before 17.1.2 |
| CVE-2025-36504 | 7.5 | May 7 | When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization. Note: Software versions… Affected: 16.1.0 before 16.1.6; 17.1.0 before 17.1.2 |
| CVE-2025-24326 | 7.5 | Feb 5 | When BIG-IP Advanced WAF/ASM Behavioral DoS (BADoS) TLS Signatures feature is configured, undisclosed traffic can case an increase in memory resource utilization Affected: 15.1.0 before 15.1.10.6.0.11.6-ENG; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2 |
| CVE-2025-22846 | 7.5 | Feb 5 | When SIP Session and Router ALG profiles are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to… Affected: 15.1.0 before 15.1.10.6.0.11.6; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2 |
| CVE-2025-21091 | 7.5 | Feb 5 | When SNMP v1 or v2c are disabled on the BIG-IP, undisclosed requests can cause an increase in memory resource utilization Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2 |
| CVE-2025-21087 | 7.5 | Feb 5 | When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed traffic can cause an increase in memory and CPU… Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2 |
| CVE-2025-20058 | 7.5 | Feb 5 | When a BIG-IP message routing profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which… Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2 |
| CVE-2025-20045 | 7.5 | Feb 5 | When SIP session Application Level Gateway mode (ALG) profile with Passthru Mode enabled and SIP router ALG profile are configured on a Message Routing type virtual server,… Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2 |
| CVE-2024-41727 | 7.5 | Aug 14 | In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV NIC, undisclosed traffic can cause an increase in memory… Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0 |
| CVE-2024-41164 | 7.5 | Aug 14 | When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions beyond the attackers control can cause TMM to… Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0 |
| CVE-2024-39778 | 7.5 | Aug 14 | When a stateless virtual server is configured on BIG-IP system with a High-Speed Bridge (HSB), undisclosed requests can cause TMM to terminate Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0 |
| CVE-2024-33608 | 7.5 | May 8 | When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate Affected: 17.1.0 |
| CVE-2024-25560 | 7.5 | May 8 | When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel (TMM) to terminate Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.4; 17.1.0 |
| CVE-2024-24775 | 7.5 | Feb 14 | When a virtual server is enabled with VLAN group and SNAT listener is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note:… Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0 |
| CVE-2024-23979 | 7.5 | Feb 14 | When SSL Client Certificate LDAP or Certificate Revocation List Distribution Point (CRLDP) authentication profile is configured on a virtual server, undisclosed requests can cause… Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0 |
| CVE-2024-23805 | 7.5 | Feb 14 | Undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate Affected: 15.1.0 before 15.1.10; 16.1.0 before 16.1.4; 17.1.0 |
| CVE-2024-23314 | 7.5 | Feb 14 | When HTTP/2 is configured on BIG-IP or BIG-IP Next SPK systems, undisclosed responses can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions… Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0 |
| CVE-2024-23308 | 7.5 | Feb 14 | When a BIG-IP Advanced WAF or BIG-IP ASM policy with a Request Body Handling option is attached to a virtual server, undisclosed requests can cause the BD process to terminate Affected: 17.1.0 before 17.1.1 |
| CVE-2024-21849 | 7.5 | Feb 14 | When an Advanced WAF/ASM security policy and a Websockets profile are configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM)… Affected: 16.1.0 before 16.1.4 |
| CVE-2024-21789 | 7.5 | Feb 14 | When a BIG-IP ASM/Advanced WAF security policy is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization Affected: 17.1.0 before 17.1.1 |
| CVE-2023-41085 | 7.5 | Oct 10 | When IPSec is configured on a Virtual Server, undisclosed traffic can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not… Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4 |
| CVE-2023-40542 | 7.5 | Oct 10 | When TCP Verified Accept is enabled on a TCP profile that is configured on a Virtual Server, undisclosed requests can cause an increase in memory resource utilization. Note:… Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4 |
The 500 most important CVEs for this product (exploited first, then by severity)