Login Request a demo
BD
Product
Big-ip Ddos Hybrid Defender
by F5 · last CVE Sep 2, 2026
On CISA KEVExploited in the wildRansomware-linked
166
CVEs
6
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities166In the news0Timeline
Severity mix
Critical 9High 96Medium 59Low 2
Severity
All severities166Critical9High96Medium59Low2
Exploitation
On CISA KEV6Exploited in the wild6
Watch

Add Big-ip Ddos Hybrid Defender to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-46748
In wildKEV
8.8
4%
Oct 26
BIG-IP Configuration utility authenticated SQL injection vulnerability
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 through 15.1.10; 16.1.0 through 16.1.4; 17.1.0 through 17.1.1
CVE-2023-44487
In wildKEV
7.5
100%
Oct 10
HTTP/2 Rapid Reset Attack Vulnerability
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 through 15.1.10; 16.1.0 through 16.1.4; 17.1.0
CVE-2026-41957
8.8
1%
May 13
BIG-IP and BIG-IQ Configuration utility vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6
CVE-2025-20029
8.8
7%
Feb 5
Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticated attacker to execute arbitrary system commands
Affected: 15.1.0 before 15.1.10.6; 16.1.0 before 16.1.5.2; 17.1.0 before 17.1.2.1
CVE-2021-23026
8.8
0%
Sep 14
BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x and all versions of BIG-IQ 8.x,…
Affected: 13.1.0 through 13.1.4; 14.1.0 through 14.1.4; 15.1.0 through 15.1.2; 16.0.0 through 16.0.1
CVE-2021-23025
8.8
2%
Sep 14
On version 15.1.x before 15.1.0.5, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all versions of 12.1.x and 11.6.x, an authenticated remote command execution vulnerability…
Affected: 11.6.1 through 11.6.5; 12.1.0 through 12.1.6; 13.1.0 before 13.1.3.5; 14.1.0 before 14.1.3.1; 15.0.0 before 15.1.0.5
CVE-2021-22988
8.8
10%
Mar 31
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, TMUI, also…
Affected: 11.6.1 before 11.6.5.3; 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.4; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1
CVE-2020-5922
8.8
1%
Aug 26
In BIG-IP versions 15.0.0-15.1.0.4, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, iControl REST does not implement Cross Site Request Forgery protections…
Affected: 11.6.1 through 11.6.5; 12.1.0 before 12.1.5.2; 13.1.0 before 13.1.3.4; 14.1.0 before 14.1.2.7; 15.0.0 before 15.1.0.5
CVE-2026-42930
8.7
0%
May 13
Appliance mode iControl REST vulnerability
Affected: 21.0.0; 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6
CVE-2026-42406
8.7
0%
May 13
BIG-IP and BIG-IQ privilege escalation vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-32643
8.7
0%
May 13
BIG-IP and BIG-IQ privilege escalation vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-32673
8.7
0%
May 13
BIG-IP scripted monitor vulnerability
Affected: 17.1. through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-34176
8.7
1%
May 13
Knowledge Appliance mode iControl REST vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-41953
8.7
0%
May 13
BIG-IP Privilege Escalation vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-40631
8.7
0%
May 13
BIG-IP iControl SOAP vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-40698
8.7
0%
May 13
iControl REST and TMSH vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-42924
8.7
0%
May 13
BIG-IP iControl SOAP vulnerability
Affected: 21.0.0; 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6
CVE-2025-61958
8.7
0%
Oct 15
A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role to bypass tmsh restrictions and gain access to a…
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 before 17.5.1.1
CVE-2025-59481
8.7
0%
Oct 15
A vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with at least resource administrator role to…
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1
CVE-2025-53868
8.7
0%
Oct 15
When running in Appliance mode, a highly privileged authenticated attacker with access to SCP and SFTP may be able to bypass Appliance mode restrictions using undisclosed…
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1
CVE-2025-31644
8.7
24%
May 7
When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated…
Affected: 15.1.0 before 15.1.10.7; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
CVE-2023-43746
8.7
1%
Oct 10
When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing BIG-IP external monitor on a…
Affected: 13.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4
CVE-2023-22374
8.5
73%
Feb 1
A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, potentially execute arbitrary code
Affected: 14.1.4.6 through 14.1.5; 15.1.5.1 through 15.1.8; 16.1.2.2 through 16.1.3; 13.1.5
CVE-2021-22978
8.3
1%
Feb 12
On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12.1.x and 11.6.x versions, undisclosed endpoints in iControl…
Affected: 11.6.1 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 before 13.1.3.5; 14.1.0 before 14.1.3.1; 15.1.0 before 15.1.1; 16.0.0 before 16.0.1
CVE-2021-23012
8.2
0%
May 10
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, and 13.1.x before 13.1.4, lack of input validation for items used in the system support…
Affected: 13.1.0 before 13.1.4; 14.1.0 before 14.1.4; 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.1
CVE-2023-40537
8.1
1%
Oct 10
An authenticated user's session cookie may remain valid for a limited time after logging out from the BIG-IP Configuration utility on a multi-blade VIPRION platform.  Note:…
Affected: 13.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4
CVE-2025-24320
8.0
0%
Feb 5
A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the…
Affected: 15.1.0 before 15.1.10.6; 16.1.0 before 16.1.5.2; 17.1.0 before 17.1.2
CVE-2024-31156
8.0
1%
May 8
A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the…
Affected: 15.1.0 before 15.1.10.4; 16.1.0 before 16.1.4.3; 17.1.0 before 17.1.1.3
CVE-2026-41217
7.9
0%
May 13
BIG-IP tmsh vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2023-43611
7.8
0%
Oct 10
The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process.  This vulnerability is due to an incomplete fix…
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4
CVE-2026-40423
7.5
0%
May 13
BIG-IP SIP profile vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-39458
7.5
0%
May 13
BIG-IP DNS Cache vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-39455
7.5
0%
May 13
BIG-IP Configuration utility vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-42409
7.5
0%
May 13
BIG-IP HTTP/2 vulnerability
Affected: 21.0.0; 16.1.0 through 16.1.6; 17.1.0 through 17.1.3; 17.5.0 through 17.5.1
CVE-2026-41227
7.5
0%
May 13
BIG-IP HTTP/2 Layer 7 Dos Protection vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6
CVE-2026-40618
7.5
0%
May 13
BIG-IP SSL/TLS vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-41956
7.5
0%
May 13
BIG-IP TMM Vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6
CVE-2026-42920
7.5
0%
May 13
BIG-IP DTLS Vulnerability
Affected: 21.0.0; 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6
CVE-2026-40629
7.5
0%
May 13
BIG-IP SSL/TLS vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6
CVE-2026-41218
7.5
0%
May 13
BIG-IP PEM iRules vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2025-61990
7.5
0%
Oct 15
When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which…
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 before 17.5.1.3
CVE-2025-58071
7.5
0%
Oct 15
When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End…
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0
CVE-2025-61951
7.5
0%
Oct 15
Undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  This issue may occur when a Datagram Transport Layer Security (DTLS) 1.2 virtual server is…
Affected: 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0
CVE-2025-59781
7.5
0%
Oct 15
When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilization.   Note: Software versions…
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
CVE-2025-58096
7.5
0%
Oct 15
When the database variable tm.tcpudptxchecksum is configured as non-default value Software-only on a BIG-IP system, undisclosed traffic can cause the Traffic Management…
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1
CVE-2025-53856
7.5
0%
Oct 15
When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object uses the embedded Packet Velocity Acceleration (ePVA) feature,…
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1
CVE-2025-53474
7.5
0%
Oct 15
When an iRule using an ILX::call command is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software…
Affected: 15.1.0 before 15.1.1.0.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1
CVE-2025-48008
7.5
0%
Oct 15
When a TCP profile with Multipath TCP (MPTCP) enabled is configured on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the…
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6
CVE-2025-46706
7.5
0%
Oct 15
When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software…
Affected: 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
CVE-2025-52585
7.5
0%
Aug 13
When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman (ADH) ciphers enabled, undisclosed requests can…
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
Page 1 of 2 · 96 total
12