BA
Product
Big-ip Application Security Manager
On CISA KEVExploited in the wildRansomware-linked
580
CVEs
11
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 39High 322Medium 139Low 0
Watch
Add Big-ip Application Security Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-23016 | 7.5 | Jan 25 | On versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP SSL Forward Proxy with TLS 1.3 is configured on a virtual server, undisclosed requests can cause the… Affected: 15.1.0 before 15.1.4.1; 16.1.0 before 16.1.2 |
| CVE-2022-23015 | 7.5 | Jan 25 | On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, and 14.1.2.6-14.1.4.4, when a Client SSL profile is configured on a virtual server with Client Certificate… Affected: 14.1.2.6 before 14.1.4.4; 15.1.0 before 15.1.4.1; 16.0.0 before 16.1.0 |
| CVE-2022-23012 | 7.5 | Jan 25 | On BIG-IP versions 15.1.x before 15.1.4.1 and 14.1.x before 14.1.4.5, when the HTTP/2 profile is configured on a virtual server, undisclosed requests can cause the Traffic… Affected: 14.1.0 before 14.1.4.5; 15.1.0 before 15.1.4.1 |
| CVE-2022-23011 | 7.5 | Jan 25 | On certain hardware BIG-IP platforms, in version 15.1.x before 15.1.4 and 14.1.x before 14.1.3, virtual servers may stop responding while processing TCP traffic due to an issue in… Affected: 14.1.0 before 14.1.3; 15.1.0 before 15.1.4; 14.1.0 before 14.1.3; 15.1.0 before 15.1.4; 14.1.0 before 14.1.3; 15.1.0 before 15.1.4 |
| CVE-2022-23010 | 7.5 | Jan 25 | On BIG-IP versions 16.x before 16.1.0, 15.1.x before 15.1.4.1, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a FastL4 profile and an HTTP profile… Affected: 11.6.0 through 11.6.5; 12.1.0 through 12.1.6; 13.1.0 through 13.1.4; 14.1.0 before 14.1.4.4; 15.1.0 before 15.1.4.1; 16.0.0 before 16.1.0 |
| CVE-2002-20001 | 7.5 | Nov 11 | The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive… Affected: 13.1.0 through 17.1.2; 17.5.0 |
| CVE-2021-23030 | 7.5 | Sep 14 | On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a… Affected: 12.1.0 through 12.1.6; 13.1.0 through 13.1.4; 14.1.0 through 14.1.4; 15.1.0 through 15.1.3; 16.0.0 through 16.0.1.1 |
| CVE-2021-23028 | 7.5 | Sep 14 | On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, and 13.1.x before 13.1.4, when JSON content profiles are configured for URLs as part of an F5… Affected: 13.1..3.5 through 13.1.3.6; 14.1.3.1 through 14.1.4.1; 15.1.0 before 15.1.3.1; 16.0.1 |
| CVE-2021-23036 | 7.5 | Sep 14 | On version 16.0.x before 16.0.1.2, when a BIG-IP ASM and DataSafe profile are configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel… Affected: 16.0.0 through 16.0.1 |
| CVE-2021-23039 | 7.5 | Sep 14 | On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.2.8, and all versions of 13.1.x and 12.1.x, when IPSec is configured on a BIG-IP system, undisclosed… Affected: 12.1.0 through 12.1.6; 13.1.0 through 13.1.4; 14.1.0 before 14.1.2.8; 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.2 |
| CVE-2021-23035 | 7.5 | Sep 14 | On BIG-IP 14.1.x before 14.1.4.4, when an HTTP profile is configured on a virtual server, after a specific sequence of packets, chunked responses can cause the Traffic Management… Affected: 14.1.0 through 14.1.4.4 |
| CVE-2021-23034 | 7.5 | Sep 14 | On BIG-IP version 16.x before 16.1.0 and 15.1.x before 15.1.3.1, when a DNS profile using a DNS cache resolver is configured on a virtual server, undisclosed requests can cause… Affected: 15.1.0 before 15.1.3.1; 16.0.0 before 16.1.0 |
| CVE-2021-23033 | 7.5 | Sep 14 | On BIG-IP Advanced WAF and BIG-IP ASM version 16.x before 16.1.0x, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when a… Affected: 12.1.0 through 12.1.6; 13.1.0 before 13.1.4.1; 14.1.0 before 14.1.4.3; 15.1.0 before 15.1.3.1; 16.0.0 before 16.1.0 |
| CVE-2021-23045 | 7.5 | Sep 14 | On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when an SCTP profile with multiple… Affected: 12.1.0 through 12.1.6; 13.1.0 before 13.1.4.1; 14.1.0 before 14.1.4.3; 15.1.0 before 15.1.3.1; 16.0.0 before 16.0.1.2 |
| CVE-2021-23044 | 7.5 | Sep 14 | On BIG-IP version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, when the Intel QuickAssist… Affected: 11.6.0 through 11.6.5; 12.1.0 through 12.1.6; 13.1.0 before 13.1.4.1; 14.1.0 before 14.1.4.2; 15.1.0 before 15.1.3.1; 16.0.0 before 16.1.0 |
| CVE-2021-23042 | 7.5 | Sep 14 | On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, and 12.1.x before 12.1.6, when an HTTP profile is configured on a… Affected: 12.1.0 before 12.1.6; 13.1.0 before 13.1.4; 14.1.0 before 14.1.4; 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.2 |
| CVE-2021-23051 | 7.5 | Sep 14 | On BIG-IP versions 15.1.0.4 through 15.1.3, when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) driver is used with BIG-IP on Amazon Web Services (AWS)… Affected: 15.1.0.4 before 15.1.3.1 |
| CVE-2021-23050 | 7.5 | Sep 14 | On BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3 and NGINX App Protect on all versions before 3.5.0, when a cross-site request forgery… Affected: 15.1.0 before 15.1.3.1; 16.0.0 before 16.0.1.2 |
| CVE-2021-23049 | 7.5 | Sep 14 | On BIG-IP version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3, when the iRules RESOLVER::summarize command is used on a virtual server, undisclosed requests can cause an… Affected: 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.2 |
| CVE-2021-23048 | 7.5 | Sep 14 | On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, when GPRS Tunneling… Affected: 11.6.1 through 11.6.5; 12.1.0 through 12.1.6; 13.1.0 before 13.1.4.1; 14.1.0 before 14.1.4.3; 15.1.0 before 15.1.3.1; 16.0.0 before 16.0.1.2 |
| CVE-2021-23010 | 7.5 | May 10 | On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and 12.1.x before 12.1.5.3, when the BIG-IP ASM/Advanced WAF system… Affected: 12.1.0 through 12.1.5.3; 13.0 through 13.1.3.5; 14.1.0 through 14.1.3.1; 15.1.0 through 15.1.2; 16.0.0 through 16.0.1.1 |
| CVE-2021-23009 | 7.5 | May 10 | On BIG-IP version 16.0.x before 16.0.1.1 and 15.1.x before 15.1.3, malformed HTTP/2 requests may cause an infinite loop which causes a Denial of Service for Data Plane traffic Affected: 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.1 |
| CVE-2021-23013 | 7.5 | May 10 | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, the Traffic Management Microkernel (TMM)… Affected: 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.4; 14.1.0 before 14.1.4; 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.1 |
| CVE-2021-23011 | 7.5 | May 10 | On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, when the BIG-IP system is… Affected: 11.6.1 before 11.6.5.3; 12.1.0 before 12.1.6; 13.1.0 before 13.1.4; 14.1.0 before 14.1.4; 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.1 |
| CVE-2021-23004 | 7.5 | Mar 31 | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, Multipath TCP… Affected: 11.6.1 before 11.6.5.3; 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.4; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1 |
| CVE-2021-23003 | 7.5 | Mar 31 | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, the Traffic… Affected: 11.6.1 before 11.6.5.3; 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.4; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1 |
| CVE-2021-23000 | 7.5 | Mar 31 | On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2, if the tmm.http.rfc.enforcement BigDB key is enabled in a BIG-IP system, or the Bad host header value is checked in the AFM HTTP… Affected: 13.1.3.4 before 13.1.3.6; 12.1.5.2 |
| CVE-2021-22999 | 7.5 | Mar 31 | On versions 15.0.x before 15.1.0 and 14.1.x before 14.1.4, the BIG-IP system provides an option to connect HTTP/2 clients to HTTP/1.x servers Affected: 14.1.0 before 14.1.4; 15.0.0 before 15.1.0 |
| CVE-2021-22977 | 7.5 | Feb 12 | On BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3, cooperation between malicious HTTP client code and a malicious server may cause TMM to restart and generate a core file Affected: 14.1.0 before 14.1.3.1; 16.0.0 before 16.0.1.1 |
| CVE-2021-22985 | 7.5 | Feb 12 | On BIG-IP APM version 16.0.x before 16.0.1.1, under certain conditions, when processing VPN traffic with APM, TMM consumes excessive memory Affected: 11.6.1 before 11.6.5.2; 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.2.8; 15.1.0 before 15.1.2; 16.0.0 before 16.0.1.1 |
| CVE-2021-22976 | 7.5 | Feb 12 | On BIG-IP Advanced WAF and ASM version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, and all 12.1.x versions, when the BIG-IP ASM… Affected: 12.1.0 through 12.1.5; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.3.1; 15.1.0 before 15.1.2; 16.0.0 before 16.0.1.1 |
| CVE-2021-22975 | 7.5 | Feb 12 | On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, and 14.1.x before 14.1.3.1, under some circumstances, Traffic Management Microkernel (TMM) may restart on the… Affected: 14.1.0 before 14.1.3.1; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1 |
| CVE-2021-22974 | 7.5 | Feb 12 | On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6 and all versions of BIG-IQ 7.x and 6.x, an authenticated… Affected: 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.3.1; 15.1.0 before 15.1.2; 16.0.0 before 16.0.1.1 |
| CVE-2021-22973 | 7.5 | Feb 12 | On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12.1.x versions, JSON parser function does not protect… Affected: 12.1.0 through 12.1.5; 13.1.0 before 13.1.3.5; 14.1.0 before 14.1.3.1; 15.1.0 before 15.1.2; 16.0.0 before 16.0.1.1 |
| CVE-2020-27728 | 7.5 | Dec 24 | On BIG-IP ASM & Advanced WAF versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, under certain conditions, Analytics, Visibility, and Reporting daemon (AVRD) may… Affected: 14.1.0 before 14.1.3.1; 15.0.0 before 15.1.1; 16.0.0 before 16.0.1 |
| CVE-2020-27715 | 7.5 | Dec 24 | On BIG-IP 15.1.0-15.1.0.5 and 14.1.0-14.1.3, crafted TLS request to the BIG-IP management interface via port 443 can cause high (~100%) CPU utilization by the httpd daemon Affected: 14.1.0 before 14.1.3.1; 15.0.0 before 15.1.1 |
| CVE-2020-27718 | 7.5 | Dec 24 | When a BIG-IP ASM or Advanced WAF system running version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, or 11.6.1-11.6.5.2 processes requests… Affected: 11.6.1 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 before 13.1.3.5; 14.1.0 before 14.1.3.1; 15.0.0 before 15.1.1; 16.0.0 before 16.0.1 |
| CVE-2020-5949 | 7.5 | Dec 11 | On BIG-IP versions 14.0.0-14.0.1 and 13.1.0-13.1.3.4, certain traffic pattern sent to a virtual server configured with an FTP profile can cause the FTP channel to break Affected: 13.1.0 before 13.1.3.5; 14.0.0 before 14.1.0 |
| CVE-2020-5941 | 7.5 | Nov 5 | On BIG-IP versions 16.0.0-16.0.0.1 and 15.1.0-15.1.0.5, using the RESOLV::lookup command within an iRule may cause the Traffic Management Microkernel (TMM) to generate a core file… Affected: 15.1.0 before 15.1.1; 16.0.0 before 16.0.1 |
| CVE-2020-5939 | 7.5 | Nov 5 | In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.3, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, and 13.1.0-13.1.3.4, BIG-IP Virtual Edition (VE) systems on VMware, with an Intel-based 85299… Affected: 13.1.0 through 13.1.3; 14.1.0 before 14.1.2.7; 15.1.0 before 15.1.0.4; 16.0.0 before 16.0.1 |
| CVE-2020-5933 | 7.5 | Oct 29 | On versions 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, when a BIG-IP system that has a virtual server configured with an HTTP… Affected: 11.6.1 before 11.6.5.2; 12.1.0 before 12.1.5.2; 13.1.0 through 13.1.3.4; 14.1.0 before 14.1.2.4; 15.1.0 before 15.1.1 |
| CVE-2020-5931 | 7.5 | Oct 29 | On BIG-IP 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, Virtual servers with a OneConnect profile may incorrectly handle WebSockets… Affected: 11.6.1 through 11.6.5.2; 12.1.0 through 12.1.5.2; 13.1.0 through 13.1.3.4; 14.0.0 before 14.1.2.5; 15.0.0 before 15.1.1 |
| CVE-2020-5930 | 7.5 | Sep 25 | In BIG-IP 15.0.0-15.1.0.4, 14.1.0-14.1.2.7, 13.1.0-13.1.3.3, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2 and BIG-IQ 5.2.0-7.1.0, unauthenticated attackers can cause disruption of service… Affected: 11.6.1 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 before 13.1.3.4; 14.1.0 before 14.1.2.8; 15.1.0 before 15.1.0.5 |
| CVE-2020-5926 | 7.5 | Aug 26 | In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, a BIG-IP virtual server with a Session Initiation Protocol (SIP) ALG profile, parsing SIP messages that… Affected: 14.1.0 before 14.1.2.7; 15.0.0 before 15.0.1.4; 15.1.0 before 15.1.0.5 |
| CVE-2020-5925 | 7.5 | Aug 26 | In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, undisclosed internally generated UDP traffic may cause… Affected: 11.6.1 before 11.6.5.2; 12.1.0 before 12.1.5.2; 13.1.0 before 13.1.3.4; 14.1.0 before 14.1.2.7; 15.0.0 before 15.0.1.4; 15.1.0 before 15.1.0.5 |
| CVE-2020-5921 | 7.5 | Aug 26 | in BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, Syn flood causes large number of MCPD context messages… Affected: 12.1.0 before 12.1.5.2; 14.1.0 before 14.1.2.7; 15.0.0 before 15.0.1.4; 15.1.0 before 15.1.0.5 |
| CVE-2020-5918 | 7.5 | Aug 26 | In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management Microkernel (TMM) may stop… Affected: 11.6.1 before 11.6.5.2; 12.1.0 before 12.1.5.2; 13.1.0 before 13.1.3.4; 14.1.0 before 14.1.2.5; 15.0.0 before 15.0.1.4; 15.1.0 before 15.1.0.5 |
| CVE-2020-5914 | 7.5 | Aug 26 | In BIG-IP ASM versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, undisclosed server cookie scenario may cause BD to… Affected: 11.5.2 before 11.6.5.2; 12.1.0 before 12.1.5.2; 13.1.0 before 13.1.3.4; 14.1.0 before 14.1.2.5; 15.0.0 before 15.0.1.4; 15.1.0 before 15.1.0.5 |
| CVE-2020-5891 | 7.5 | Apr 30 | On BIG-IP 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, undisclosed HTTP/2 requests can lead to a denial of service when sent to a virtual server configured with the… Affected: 14.1.0 through 14.1.2.3; 15.0.0 through 15.0.1.2; 15.1.0 through 15.1.0.1 |
| CVE-2020-5883 | 7.5 | Apr 30 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, when a virtual server is configured with HTTP explicit proxy and has an attached HTTP_PROXY_REQUEST… Affected: 13.1.0 through 13.1.3.1; 14.0.0 through 14.0.1; 14.1.0 through 14.1.2.3; 15.0.0 through 15.0.1.3 |
The 500 most important CVEs for this product (exploited first, then by severity)