Login Request a demo
BF
Product
Big-ip Fraud Protection Service
by F5 · last CVE Sep 2, 2026
On CISA KEVExploited in the wildRansomware-linked
404
CVEs
6
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities404In the news1Timeline
Severity mix
Critical 26High 236Medium 139Low 3
Severity
All severities404Critical26High236Medium139Low3
Exploitation
On CISA KEV6Exploited in the wild6
Watch

Add Big-ip Fraud Protection Service to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-5856
7.5
1%
Feb 6
On BIG-IP 15.0.0-15.0.1.1 and 14.1.0-14.1.2.2, while processing specifically crafted traffic using the default 'xnet' driver, Virtual Edition instances hosted in Amazon Web…
Affected: 14.1.0 before 14.1.2.3; 15.0.0 before 15.1.0
CVE-2020-5852
7.5
1%
Jan 14
Undisclosed traffic patterns received may cause a disruption of service to the Traffic Management Microkernel (TMM)
Affected: 11.5.4.2.74.291; 12.1.4.1.0.97.6; 14.1.2.1.0.83.4
CVE-2019-6684
7.5
1%
Dec 23
On versions 15.0.0-15.0.1.1, 14.0.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, under certain conditions, a multi-bladed BIG-IP Virtual Clustered…
Affected: 11.5.2 through 11.6.5; 12.1.0 through 12.1.5; 13.0.0 before 13.1.3.2; 14.0.0 before 14.1.2.3; 15.0.0 before 15.1.0
CVE-2019-6680
7.5
1%
Dec 23
On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5, while processing traffic through a standard virtual server that…
Affected: 11.5.2 before 11.6.5.1; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.2.1; 15.0.0 before 15.0.1.1
CVE-2019-6683
7.5
1%
Dec 23
On versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IP virtual servers with Loose Initiation enabled on a FastL4…
Affected: 11.5.2 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.2.3; 15.0.0 before 15.1.0
CVE-2019-6677
7.5
1%
Dec 23
On BIG-IP versions 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.5, under certain conditions when using custom TCP congestion control settings in a…
Affected: 12.1.0 through 12.1.5; 13.1.0 before 13.1.3.2; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.2.1; 15.0.0 before 15.0.1.1
CVE-2019-6676
7.5
1%
Dec 23
On versions 15.0.0-15.0.1, 14.0.0-14.1.2.2, and 13.1.0-13.1.3.1, TMM may restart on BIG-IP Virtual Edition (VE) when using virtio direct descriptors and packets 2 KB or larger
Affected: 13.1.0 before 13.1.3.2; 14.0.0 before 14.1.2.3; 15.0.0 before 15.0.1.1
CVE-2019-6666
7.5
1%
Nov 27
On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, and 13.1.0-13.1.1.4, the TMM process may produce a core file when an upstream server or cache sends the BIG-IP an…
Affected: 13.1.0 through 13.1.1.4; 14.0.0 through 14.0.0.4; 14.1.0 through 14.1.0.5; 15.0.0 through 15.0.1
CVE-2019-6667
7.5
1%
Nov 27
On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.1.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.5.1-11.6.5, under certain conditions, TMM may consume excessive resources when…
Affected: 11.5.1 through 11.6.5; 12.1.0 through 12.1.4.1; 13.1.0 through 13.1.1.5; 14.0.0 through 14.0.0.4; 14.1.0 through 14.1.0.5; 15.0.0 through 15.0.1
CVE-2019-6669
7.5
1%
Nov 27
On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, undisclosed traffic flow may cause TMM to restart under some…
Affected: 11.5.1 through 11.6.5.1; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3.1; 14.0.0 through 14.0.1; 14.1.0 through 14.1.2; 15.0.0 through 15.0.1
CVE-2019-6671
7.5
1%
Nov 27
On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, under certain conditions tmm may leak memory when processing packet fragments, leading to resource…
Affected: 13.1.0 through 13.1.3.1; 14.0.0 through 14.0.1; 14.1.0 through 14.1.2; 15.0.0 through 15.0.1
CVE-2019-6673
7.5
1%
Nov 27
On versions 15.0.0-15.0.1 and 14.0.0-14.1.2, when the BIG-IP is configured in HTTP/2 Full Proxy mode, specifically crafted requests may cause a disruption of service provided by…
Affected: 14.0.0 through 14.1.2; 15.0.0 through 15.0.1
CVE-2019-6664
7.5
1%
Nov 15
On BIG-IP 15.0.0 and 14.1.0-14.1.0.6, under certain conditions, network protections on the management port do not follow current best practices
Affected: 14.1.0 before 14.1.2; 15.0.0
CVE-2019-6660
7.5
1%
Nov 15
On BIG-IP 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.1, undisclosed HTTP requests may consume excessive amounts of systems resources which may lead to a denial of service
Affected: 13.1.0 before 13.1.3; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.2.1
CVE-2019-6659
7.5
1%
Nov 15
On version 14.0.0-14.1.0.1, BIG-IP virtual servers with TLSv1.3 enabled may experience a denial of service due to undisclosed incoming messages
Affected: 14.0.0 before 14.1.0.2
CVE-2018-5743
7.5
6%
Oct 9
Limiting simultaneous TCP clients was ineffective
Affected: 11.5.2 through 11.6.5; 12.1.0 through 12.1.4; 13.0.0 through 13.1.1; 14.0.0 through 14.1.0; 15.0.0
CVE-2018-14880
7.5
5%
Oct 3
The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr()
Affected: 11.5.2 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3; 14.0.0 through 14.1.2; 15.0.0 through 15.0.1
CVE-2018-14468
7.5
4%
Oct 3
The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print()
Affected: 11.6.0 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3; 14.0.0 through 14.1.2; 15.0.0 through 15.0.1
CVE-2019-6643
7.5
1%
Sep 4
On versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, and 11.5.2-11.6.4, an attacker sending specifically crafted DHCPv6 requests through a BIG-IP virtual…
Affected: 11.5.2 through 11.6.4; 12.1.0 through 12.1.4; 13.0.0 through 13.1.1; 14.0.0; 14.1.0
CVE-2019-6645
7.5
1%
Sep 4
On BIG-IP 14.0.0-14.1.0.5, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, FTP traffic passing through a Virtual Server with both an active FTP profile associated and connection…
Affected: 11.5.2 through 11.6.4; 12.1.0 through 12.1.4; 13.0.0 through 13.1.1; 14.0.0; 14.1.0
CVE-2019-6623
7.5
3%
Jul 2
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, undisclosed traffic sent to BIG-IP iSession virtual server may cause the Traffic Management…
Affected: 12.1.0 through 12.1.4; 13.0.0 through 13.1.1.4; 14.0.0 through 14.0.0.4; 14.1.0 through 14.1.0.5
CVE-2019-6624
7.5
1%
Jul 2
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, an undisclosed traffic pattern sent to a BIG-IP UDP virtual server may lead to a denial-of-service…
Affected: 12.1.0 through 12.1.4; 13.0.0 through 13.1.1.4; 14.0.0 through 14.0.0.4; 14.1.0 through 14.1.0.5
CVE-2019-11479
7.5
92%
Jun 18
Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes
Affected: 11.5.2 before 11.6.5.1; 12.1.0 before 12.1.5.1; 13.1.0 before 13.1.3.2; 14.0.0 before 14.0.1.1; 14.1.2 before 14.1.2.1; 15.0.0 before 15.0.1.1
CVE-2019-11478
7.5
95%
Jun 18
SACK can cause extensive memory use via fragmented resend queue
Affected: 11.5.2 through 11.6.4; 12.1.0 through 12.1.4; 13.1.0 through 13.1.1; 14.0.0 through 14.1.0; 15.0.0
CVE-2019-11477
7.5
99%
Jun 18
Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segs
Affected: 11.5.2 through 11.6.4; 12.1.0 through 12.1.4; 13.1.0 through 13.1.1; 14.0.0 through 14.1.0; 15.0.0
CVE-2019-12295
7.5
4%
May 23
In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash
Affected: 12.1.3.6 before 12.1.5.3; 13.1.1.2 before 13.1.3.5; 14.0.0.3 through 14.0.1; 14.1.0 before 14.1.2; 15.0.0 through 15.0.1; 15.1.0
CVE-2019-6611
7.5
2%
May 3
When BIG-IP 14.0.0-14.1.0.1, 13.0.0-13.1.1.4, 12.1.0-12.1.4, 11.6.1-11.6.3.4, and 11.5.2-11.5.8 are processing certain rare data sequences occurring in PPTP VPN traffic, the…
Affected: 11.5.2 before 11.5.9; 11.6.1 before 11.6.4; 12.1.0 before 12.1.4.1; 13.0.0 before 13.1.1.5; 14.0.0 before 14.1.0.2
CVE-2019-6605
7.5
2%
Mar 28
On BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, and 12.0.x, an undisclosed sequence of packets received by an SSL virtual server and processed by an associated Client SSL or Server SSL…
Affected: 11.5.0 before 11.5.9; 11.6.0 before 11.6.4; 12.0.0 before 12.1.0
CVE-2019-6603
7.5
2%
Mar 28
In BIG-IP 11.5.1-11.5.8, 11.6.1-11.6.3, 12.1.0-12.1.3, and 13.0.0-13.0.1, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of…
Affected: 11.5.1 through 11.5.8; 11.6.1 through 11.6.3; 12.1.0 through 12.1.3; 13.0.0 through 13.0.1
CVE-2019-6602
7.5
2%
Mar 28
In BIG-IP 11.5.1-11.5.8 and 11.6.1-11.6.3, the Configuration Utility login page may not follow best security practices when handling a malicious request
Affected: 11.5.1 through 11.5.8; 11.6.1 through 11.6.3
CVE-2018-15330
7.5
1%
Dec 20
On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.7, when a virtual server using the inflate functionality to process a gzip bomb as a payload, the BIG-IP system will…
Affected: 12.1.0 through 12.1.3.7; 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2
CVE-2018-15328
7.5
2%
Dec 12
On BIG-IP 14.0.x, 13.x, 12.x, and 11.x, Enterprise Manager 3.1.1, BIG-IQ 6.x, 5.x, and 4.x, and iWorkflow 2.x, the passphrases for SNMPv3 users and trap destinations that are used…
Affected: 11.2.1 through 11.6.3; 12.1.0 through 12.1.3; 13.0.0 through 13.1.1; 14.0.0
CVE-2018-15320
7.5
1%
Oct 31
On BIG-IP 14.0.0-14.0.0.2 or 13.0.0-13.1.1.1, undisclosed traffic patterns may lead to denial of service conditions for the BIG-IP system
Affected: 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2
CVE-2018-15317
7.5
1%
Oct 31
In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.2.1-11.6.3.2, an attacker sending specially crafted SSL records to a SSL Virtual Server will cause corruption…
Affected: 11.2.1 through 11.5.6; 11.6.0 through 11.6.3.2; 12.1.0 through 12.1.3.5; 13.0.0 through 13.1.0.7; 14.0.0 through 14.0.0.2
CVE-2018-15318
7.5
1%
Oct 31
In BIG-IP 14.0.0-14.0.0.2, 13.1.0.4-13.1.1.1, or 12.1.3.4-12.1.3.6, If an MPTCP connection receives an abort signal while the initial flow is not the primary flow, the initial…
Affected: 12.1.3.4 through 12.1.3.6; 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2
CVE-2018-15319
7.5
2%
Oct 31
On BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, or 12.1.0-12.1.3.6, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart
Affected: 12.1.0 through 12.1.3.6; 13.0.0 through 13.1.1.1; 14.0.0 through 14.0.0.2
CVE-2018-5391
7.5
32%
Sep 6
The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets
Affected: 11.5.1 before 11.6.5.1; 12.1.0 before 12.1.5; 13.0.0 before 13.1.3; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.2.4
CVE-2018-5390
7.5
72%
Aug 6
Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service
Affected: 11.5.1 through 11.6.3; 12.1.0 through 12.1.3; 13.0.0 through 13.1.1; 14.0.0
CVE-2018-5533
7.5
2%
Jul 19
Under certain conditions on F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic
Affected: 11.5.0 through 11.5.6; 11.6.0 through 11.6.3.1; 12.1.0 through 12.1.2; 13.0.0
CVE-2018-5535
7.5
3%
Jul 19
On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed by a Virtual Server with an associated QoE profile that has…
Affected: 11.2.1 through 11.6.3; 12.1.0 through 12.1.3; 13.0.0 through 13.1.1; 14.0.0
CVE-2018-5534
7.5
2%
Jul 19
Under certain conditions on F5 BIG-IP 13.1.0-13.1.0.5, 13.0.0, 12.1.0-12.1.3.1, 11.6.0-11.6.3.1, or 11.5.0-11.5.6, TMM may core while processing SSL forward proxy traffic
Affected: 11.5.0 through 11.5.6; 11.6.0 through 11.6.3.1; 12.1.0 through 12.1.3.1; 13.1.0 through 13.1.0.5; 13.0.0
CVE-2020-5913
7.4
0%
Aug 26
In versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, the BIG-IP Client or Server SSL profile ignores revoked certificates, even…
Affected: 11.6.1 before 11.6.5; 12.1.0 before 12.1.5.2; 13.1.0 before 13.1.3; 14.1.0 before 14.1.2-0.89.37; 14.1.2.1 before 14.1.2.5; 15.0.0 before 15.0.1.2
CVE-2018-5531
7.4
1%
Jul 25
Through undisclosed methods, on F5 BIG-IP 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.0-11.6.3.1, or 11.2.1-11.5.6, adjacent network attackers can cause a denial of service for VCMP…
Affected: 11.2.1 through 11.5.6; 11.6.0 through 11.6.3.1; 12.1.0 through 12.1.3.5; 13.0.0 through 13.1.0.7
CVE-2026-39459
7.2
0%
May 13
iControl REST and tmsh vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2024-45844
7.2
11%
Oct 16
BIG-IP monitors vulnerability
Affected: 15.1.0 before 15.1.10.5; 16.1.0 before 16.1.5; 17.1.0 before 17.1.1.4
CVE-2024-22389
7.2
0%
Feb 14
BIG-IP iControl REST API Vulnerability
Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0
CVE-2023-42768
7.2
1%
Oct 10
BIG-IP iControl REST vulnerability
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4
CVE-2022-35735
7.2
1%
Aug 4
BIG-IP monitor configuration vulnerability CVE-2022-35735
Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.1; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1
CVE-2021-23015
7.2
1%
May 10
On BIG-IP 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.0.8 through 13.1.3.6, and all versions of 16.0.x, when running in Appliance Mode, an authenticated user assigned the…
Affected: 13.1.0 before 13.1.4; 14.1.0 before 14.1.4; 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.1
CVE-2021-22990
7.2
9%
Mar 31
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, on systems…
Affected: 11.6.1 before 11.6.5.3; 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.4; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1
Page 5 of 9 · 404 total
1…456…9