Login Request a demo
BG
Product
Big-ip Global Traffic Manager
by F5 · last CVE Sep 2, 2026
On CISA KEVExploited in the wildRansomware-linked
489
CVEs
11
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities489In the news1Timeline
Severity mix
Critical 33High 264Medium 168Low 4
Severity
All severities489Critical33High264Medium168Low4
Exploitation
On CISA KEV11Exploited in the wild11
Watch

Add Big-ip Global Traffic Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-59781
7.5
0%
Oct 15
BIG-IP DNS cache vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
CVE-2025-46706
7.5
0%
Oct 15
BIG-IP iRules vulnerability
Affected: 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
CVE-2025-48008
7.5
0%
Oct 15
BIG-IP MPTCP vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6
CVE-2025-53474
7.5
0%
Oct 15
BIG-IP iRules vulnerability
Affected: 15.1.0 before 15.1.1.0.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3
CVE-2025-52585
7.5
0%
Aug 13
BIG-IP Client SSL profile vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
CVE-2025-41433
7.5
0%
May 7
When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed…
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2
CVE-2025-41431
7.5
0%
May 7
When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standby BIG-IP systems in…
Affected: 17.1.2
CVE-2025-41414
7.5
0%
May 7
When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate.  Note: Software versions which have reached End of…
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2
CVE-2025-41399
7.5
0%
May 7
When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note:…
Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0
CVE-2025-36557
7.5
0%
May 7
When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to…
Affected: 16.1.0 before 16.1.5; 17.1.0 before 17.1.2
CVE-2025-36504
7.5
0%
May 7
When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization.  Note: Software versions…
Affected: 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
CVE-2025-22846
7.5
0%
Feb 5
When SIP Session and Router ALG profiles are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to…
Affected: 15.1.0 before 15.1.10.6.0.11.6; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2
CVE-2025-21091
7.5
0%
Feb 5
When SNMP v1 or v2c are disabled on the BIG-IP, undisclosed requests can cause an increase in memory resource utilization
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
CVE-2025-21087
7.5
0%
Feb 5
When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed traffic can cause an increase in memory and CPU…
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
CVE-2025-20058
7.5
0%
Feb 5
When a BIG-IP message routing profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which…
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
CVE-2025-20045
7.5
0%
Feb 5
When SIP session Application Level Gateway mode (ALG) profile with Passthru Mode enabled and SIP router ALG profile are configured on a Message Routing type virtual server,…
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2
CVE-2024-41727
7.5
0%
Aug 14
In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV NIC, undisclosed traffic can cause an increase in memory…
Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0
CVE-2024-41164
7.5
0%
Aug 14
When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions beyond the attackers control can cause TMM to…
Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0
CVE-2024-39778
7.5
0%
Aug 14
When a stateless virtual server is configured on BIG-IP system with a High-Speed Bridge (HSB), undisclosed requests can cause TMM to terminate
Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0
CVE-2024-33608
7.5
1%
May 8
When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate
Affected: 17.1.0
CVE-2024-25560
7.5
1%
May 8
When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel (TMM) to terminate
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.4; 17.1.0
CVE-2024-24775
7.5
1%
Feb 14
When a virtual server is enabled with VLAN group and SNAT listener is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note:…
Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0
CVE-2024-23979
7.5
0%
Feb 14
When SSL Client Certificate LDAP or Certificate Revocation List Distribution Point (CRLDP) authentication profile is configured on a virtual server, undisclosed requests can cause…
Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0
CVE-2024-23314
7.5
1%
Feb 14
When HTTP/2 is configured on BIG-IP or BIG-IP Next SPK systems, undisclosed responses can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions…
Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0
CVE-2023-45886
7.5
2%
Nov 21
The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed…
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 through 15.1.10; 16.1.0 through 16.1.4; 17.1.0 through 17.1.1
CVE-2023-41085
7.5
1%
Oct 10
When IPSec is configured on a Virtual Server, undisclosed traffic can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not…
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4
CVE-2023-40542
7.5
1%
Oct 10
When TCP Verified Accept is enabled on a TCP profile that is configured on a Virtual Server, undisclosed requests can cause an increase in memory resource utilization.  Note:…
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4
CVE-2023-40534
7.5
1%
Oct 10
When a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, and an iRule using the HTTP_REQUEST event or Local Traffic Policy are associated…
Affected: 16.1.0 before 16.1.4.1; 17.1.0
CVE-2023-29163
7.5
1%
May 3
When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate.  Note: Software versions…
Affected: 14.1.0 before 14.1.5.4; 15.1.0 before 15.1.8.2; 16.1.0 before 16.1.3.4; 17.0.0
CVE-2022-41833
7.5
1%
Oct 19
BIG-IP iRule vulnerability CVE-2022-41833
Affected: 13.1.0 through 13.1.5
CVE-2022-41832
7.5
1%
Oct 19
BIG-IP SIP vulnerability CVE-2022-41832
Affected: 13.1.0 before 13.1.5.1; 14.1.0 before 14.1.5.1; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1; 17.0.0 before 17.0.0.1
CVE-2022-41624
7.5
1%
Oct 19
BIG-IP iRules vulnerability CVE-2022-41624
Affected: 13.1.0 before 13.1.5.1; 14.1.0 before 14.1.5.2; 15.1.0 before 15.1.7; 16.1.0 before 16.1.3.2; 17.0.0 before 17.0.0.1
CVE-2022-36795
7.5
1%
Oct 19
BIG-IP software SYN cookies vulnerability CVE-2022-36795
Affected: 14.1.0 before 14.1.5.1; 15.1.0 before 15.1.7; 16.1.0 before 16.1.3.1; 17.0.0 before 17.0.0.1
CVE-2022-35240
7.5
1%
Aug 4
BIG-IP Message Routing MQTT vulnerability CVE-2022-35240
Affected: 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.2.2
CVE-2022-35236
7.5
1%
Aug 4
HTTP2 profile vulnerability CVE-2022-35236
Affected: 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.2.2
CVE-2022-34862
7.5
1%
Aug 4
TMM vulnerability CVE-2022-34862
Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1
CVE-2022-34844
7.5
1%
Aug 4
BIG-IP and BIG-IQ AWS vulnerability CVE-2022-34844
Affected: 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1
CVE-2022-34655
7.5
1%
Aug 4
TMM vulnerability CVE-2022-34655
Affected: 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.0.0 before 16.0.1.1
CVE-2022-34651
7.5
1%
Aug 4
BIG-IP TLS 1.3 iRule vulnerability CVE-2022-34651
Affected: 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1
CVE-2022-32455
7.5
1%
Aug 4
TMM vulnerability CVE-2022-32455
Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.2.2
CVE-2022-29473
7.5
1%
May 5
On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when an IPSec ALG profile is configured on a virtual…
Affected: 13.1.0; 13.1.1; 13.1.3; 13.1.4; 13.1.5; 14.1.0; +12 more
CVE-2022-28706
7.5
1%
May 5
On F5 BIG-IP 16.1.x versions prior to 16.1.2 and 15.1.x versions prior to 15.1.5.1, when the DNS resolver configuration is used, undisclosed requests can cause the Traffic…
Affected: 15.1.0; 15.1.1; 15.1.2; 15.1.3; 15.1.4; 15.1.5; +3 more
CVE-2022-28705
7.5
1%
May 5
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, on platforms with an…
Affected: 13.1.0; 13.1.1; 13.1.3; 13.1.4; 13.1.5; 14.1.0; +13 more
CVE-2022-28701
7.5
1%
May 5
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, when the stream profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource…
Affected: 16.1.0; 16.1.1; 16.1.2
CVE-2022-28691
7.5
1%
May 5
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when a Real Time Streaming…
Affected: 13.1.0; 13.1.1; 13.1.3; 13.1.4; 13.1.5; 14.1.0; +13 more
CVE-2022-27189
7.5
1%
May 5
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x…
Affected: 11.6.1; 11.6.2; 11.6.3; 11.6.4; 11.6.5; 12.1.0; +25 more
CVE-2022-26517
7.5
1%
May 5
On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when the BIG-IP CGNAT Large Scale NAT (LSN) pool is…
Affected: 13.1.0; 13.1.1; 13.1.3; 13.1.4; 13.1.5; 14.1.0; +12 more
CVE-2022-26372
7.5
1%
May 5
On F5 BIG-IP 15.1.x versions prior to 15.1.0.2, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when a DNS listener is…
Affected: 11.6.1; 11.6.2; 11.6.3; 11.6.4; 11.6.5; 12.1.0; +25 more
CVE-2022-26370
7.5
1%
May 5
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, and 14.1.x versions prior to 14.1.4.6, when a Session Initiation Protocol (SIP) message routing…
Affected: 14.1.0; 14.1.2; 14.1.3; 14.1.4; 15.1.0; 15.1.1; +7 more
CVE-2022-26071
7.5
1%
May 5
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x…
Affected: 11.6.1; 11.6.2; 11.6.3; 11.6.4; 11.6.5; 12.1.0; +25 more
Page 3 of 10 · 489 total
1234…10