Login Request a demo
BF
Product
Big-ip Fraud Protection Service
by F5 · last CVE Sep 2, 2026
On CISA KEVExploited in the wildRansomware-linked
404
CVEs
6
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities404In the news1Timeline
Severity mix
Critical 26High 236Medium 139Low 3
Severity
All severities404Critical26High236Medium139Low3
Exploitation
On CISA KEV6Exploited in the wild6
Watch

Add Big-ip Fraud Protection Service to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-1388
RansomwareIn wildKEV
9.8
100%
May 5
F5 BIG-IP Missing Authentication Vulnerability
Affected: 11.6.1 through 11.6.5; 12.1.0 through 12.1.6; 13.1.0 before 13.1.5; 14.1.0 before 14.1.4.6; 15.1.0 before 15.1.5.1; 16.1.0 before 16.1.2.2
CVE-2021-22991
In wildKEV
9.8
62%
Mar 31
F5 BIG-IP Traffic Management Microkernel Buffer Overflow
Affected: 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.4; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1
CVE-2021-22986
RansomwareIn wildKEV
9.8
100%
Mar 31
F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
Affected: 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.4; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1
CVE-2020-5902
RansomwareIn wildKEV
9.8
100%
Jul 1
F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability
Affected: 11.6.1 before 11.6.5.2; 12.1.0 before 12.1.5.2; 13.1.0 before 13.1.3.4; 14.1.0 before 14.1.2.6; 15.0.0 before 15.0.1.4; 15.1.0 before 15.1.0.4
CVE-2018-14634
In wildKEV
7.8
15%
Sep 25
Linux Kernel Integer Overflow Vulnerability
Affected: 11.2.1 before 11.6.4; 12.1.0 before 12.1.5; 13.0.0 before 13.1.1.5; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.0.6
CVE-2023-44487
In wildKEV
7.5
100%
Oct 10
HTTP/2 Rapid Reset Attack Vulnerability
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 through 15.1.10; 16.1.0 through 16.1.4; 17.1.0
CVE-2023-41373
9.9
2%
Oct 10
A directory traversal vulnerability exists in the BIG-IP Configuration Utility that may allow an authenticated attacker to execute commands on the BIG-IP system
Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.6; 15.1.0 before 15.1.10.2; 16.1.0 before 16.1.4.1; 17.1.0 before 17.1.0.3
CVE-2021-22987
9.9
14%
Mar 31
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3 when running in…
Affected: 11.6.1 before 11.6.5.3; 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.4; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1
CVE-2022-35728
9.8
1%
Aug 4
iControl REST vulnerability CVE-2022-35728
Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.1; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1; 17.0.0
CVE-2021-22992
9.8
68%
Mar 31
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, a malicious…
Affected: 11.6.1 before 11.6.5.3; 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.4; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1
CVE-2019-6675
9.8
1%
Nov 26
BIG-IP configurations using Active Directory, LDAP, or Client Certificate LDAP for management authentication with multiple servers are exposed to a vulnerability which allows an…
Affected: 15.0.1.0.33.11-eng_hotfix through 15.0.1.0.48.11-eng_hotfix; 14.1.0.3.0.79.6-eng_hotfix; 14.1.0.3.0.97.6-eng_hotfix; 14.1.0.3.0.99.6-eng_hotfix; 14.1.0.5.0.15.5-eng_hotfix; 14.1.0.5.0.36.5-eng_hotfix; +18 more
CVE-2019-6609
9.8
1%
Apr 15
Platform dependent weakness
Affected: 12.1.2 before 12.1.4.1; 13.0.0 before 13.1.1.4; 14.0.0 before 14.1.0.2; 12.1.1
CVE-2021-23037
9.6
1%
Sep 14
On all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP…
Affected: 11.6.0 through 11.6.5; 12.1.0 through 12.1.6; 13.1.0 through 13.1.4; 14.1.0 through 14.1.4; 15.1.0 through 15.1.3; 16.0.0 through 16.1.0
CVE-2020-5948
9.6
1%
Dec 11
On BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, undisclosed endpoints in iControl REST allow for a…
Affected: 13.1.0 before 13.1.3.5; 14.1.0 before 14.1.2.8; 15.0.0 before 15.1.1; 16.0.0
CVE-2019-6644
9.4
1%
Sep 4
Similar to the issue identified in CVE-2018-12120, on versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, and 12.1.0-12.1.4 BIG-IP will bind a debug nodejs process to all…
Affected: 12.1.3 through 12.1.4; 13.0.0 through 13.1.2; 14.0.0; 14.1.0
CVE-2026-41225
9.1
0%
May 13
iControl REST vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2022-35243
9.1
1%
Aug 4
Authenticated iControl REST in Appliance mode vulnerability CVE-2022-35243
Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3
CVE-2022-34865
9.1
0%
Aug 4
Traffic intelligence feeds vulnerability CVE-2022-34865
Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1
CVE-2022-26415
9.1
1%
May 5
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x,…
Affected: 12.1.0 through 12.1.6; 13.1.0 before 13.1.5; 14.1.0 before 14.1.4.6; 15.1.0 before 15.1.5.1; 16.1.0 before 16.1.2.2
CVE-2021-22989
9.1
9%
Mar 31
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, when running…
Affected: 11.6.1 before 11.6.5.3; 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.4; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1
CVE-2020-5887
9.1
2%
Apr 30
On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, BIG-IP Virtual Edition (VE) may expose a mechanism for remote attackers to access local daemons and bypass port…
Affected: 14.1.0 through 14.1.2.3; 15.0.0 through 15.0.1.2; 15.1.0 through 15.1.0.1
CVE-2020-5886
9.1
1%
Apr 30
On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1, BIG-IP systems setup for connection mirroring in a High Availability (HA) pair transfers…
Affected: 12.1.0 through 12.1.5.1; 13.1.0 through 13.1.3.3; 14.1.0 through 14.1.2.3; 15.0.0 through 15.1.0.1
CVE-2020-5885
9.1
1%
Apr 30
On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1, BIG-IP systems set up for connection mirroring in a high availability (HA) pair transfer…
Affected: 12.1.0 through 12.1.5.1; 13.1.0 through 13.1.3.3; 14.1.0 through 14.1.2.3; 15.0.0 through 15.1.0.1
CVE-2020-5884
9.1
2%
Apr 30
On versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.4, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the default deployment mode for BIG-IP high availability (HA) pair mirroring…
Affected: 11.6.1 through 11.6.5.1; 12.1.0 through 12.1.5.1; 13.1.0 through 13.1.3.3; 14.1.0 through 14.1.2.4; 15.0.0 through 15.1.0.3
CVE-2019-6649
9.1
1%
Sep 20
F5 BIG-IP 15.0.0, 14.1.0-14.1.0.6, 14.0.0-14.0.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, 11.6.0-11.6.4, and 11.5.1-11.5.9 and Enterprise Manager 3.1.1 may expose sensitive…
Affected: 11.5.2 through 11.5.9; 11.6.1 through 11.6.4; 12.1.0 through 12.1.4; 13.1.0 through 13.1.1; 14.0.0; 14.1.0; +1 more
CVE-2019-10744
9.1
5%
Jul 26
Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution
Affected: 12.1.0 before 12.1.5.2; 13.1.0 before 13.1.3.4; 14.1.0 before 14.1.2.5; 15.0.0 before 15.0.1.4; 15.1.0 before 15.1.0.2
CVE-2019-6592
9.1
1%
Feb 26
On BIG-IP 14.1.0-14.1.0.1, TMM may restart and produce a core file when validating SSL certificates in client SSL or server SSL profiles
Affected: 14.1.0 through 14.1.0.1
CVE-2021-23038
9.0
1%
Sep 14
On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x, a stored cross-site scripting (XSS)…
Affected: 12.1.0 through 12.1.6; 13.1.0 before 13.1.4.1; 14.1.0 before 14.1.4.2; 15.1.0 before 15.1.3.1; 16.0.0 before 16.0.1.2
CVE-2026-41957
8.8
1%
May 13
BIG-IP and BIG-IQ Configuration utility vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6
CVE-2025-20029
8.8
7%
Feb 5
Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticated attacker to execute arbitrary system commands
Affected: 15.1.0 before 15.1.10.6; 16.1.0 before 16.1.5.2; 17.1.0 before 17.1.2.1
CVE-2022-41622
8.8
92%
Dec 7
In all versions,  BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP.   Note: Software versions which have reached End of…
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 through 15.1.8; 16.1.0 through 16.1.3; 17.0.0
CVE-2021-23026
8.8
0%
Sep 14
BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x and all versions of BIG-IQ 8.x,…
Affected: 13.1.0 through 13.1.4; 14.1.0 through 14.1.4; 15.1.0 through 15.1.2; 16.0.0 through 16.0.1.1
CVE-2021-23025
8.8
2%
Sep 14
On version 15.1.x before 15.1.0.5, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all versions of 12.1.x and 11.6.x, an authenticated remote command execution vulnerability…
Affected: 11.6.1 through 11.6.5; 12.1.0 through 12.1.6; 13.1.0 before 13.1.3.5; 14.1.0 before 14.1.3.1; 15.0.0 before 15.1.0.5
CVE-2021-22988
8.8
10%
Mar 31
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, TMUI, also…
Affected: 11.6.1 before 11.6.5.3; 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.4; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1
CVE-2020-5922
8.8
1%
Aug 26
In BIG-IP versions 15.0.0-15.1.0.4, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, iControl REST does not implement Cross Site Request Forgery protections…
Affected: 11.6.1 through 11.6.5; 12.1.0 before 12.1.5.2; 13.1.0 before 13.1.3.4; 14.1.0 before 14.1.2.7; 15.0.0 before 15.1.0.5
CVE-2020-5904
8.8
1%
Jul 1
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, a cross-site request forgery (CSRF) vulnerability in the Traffic Management User Interface…
Affected: 12.1.0 through 12.1.5.1; 13.1.0 through 13.1.3.3; 14.1.0 through 14.1.2.5; 15.0.0 through 15.1.0.3
CVE-2019-6646
8.8
2%
Sep 4
On BIG-IP 11.5.2-11.6.4 and Enterprise Manager 3.1.1, REST users with guest privileges may be able to escalate their privileges and run commands with admin privileges
Affected: 11.5.2 through 11.6.4; 12.0.0
CVE-2019-6642
8.8
2%
Jul 1
In BIG-IP 15.0.0, 14.0.0-14.1.0.5, 13.0.0-13.1.1.5, 12.1.0-12.1.4.2, and 11.5.2-11.6.4, BIG-IQ 6.0.0-6.1.0 and 5.1.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1,…
Affected: 11.5.2 through 11.6.4; 12.1.0 through 12.1.4.2; 13.0.0 through 13.1.1.5; 14.0.0 through 14.1.0.5; 15.0.0
CVE-2026-42930
8.7
0%
May 13
Appliance mode iControl REST vulnerability
Affected: 21.0.0; 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6
CVE-2026-42406
8.7
0%
May 13
BIG-IP and BIG-IQ privilege escalation vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-32643
8.7
0%
May 13
BIG-IP and BIG-IQ privilege escalation vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-32673
8.7
0%
May 13
BIG-IP scripted monitor vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-34176
8.7
1%
May 13
Knowledge Appliance mode iControl REST vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-41953
8.7
0%
May 13
BIG-IP Privilege Escalation vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-40631
8.7
0%
May 13
BIG-IP iControl SOAP vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-40698
8.7
0%
May 13
iControl REST and TMSH vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-42924
8.7
0%
May 13
BIG-IP iControl SOAP vulnerability
Affected: 21.0.0; 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6
CVE-2025-61958
8.7
0%
Oct 15
A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role to bypass tmsh restrictions and gain access to a…
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 before 17.5.1.1
CVE-2025-59481
8.7
0%
Oct 15
A vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with at least resource administrator role to…
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1
CVE-2025-53868
8.7
0%
Oct 15
When running in Appliance mode, a highly privileged authenticated attacker with access to SCP and SFTP may be able to bypass Appliance mode restrictions using undisclosed…
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1
Page 1 of 9 · 404 total
12…9