BW
Product
Big-ip Websafe
On CISA KEVExploited in the wildRansomware-linked
175
CVEs
3
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 7High 100Medium 66Low 2
Watch
Add Big-ip Websafe to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-5736 | 7.5 | Aug 19 | The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x… Affected: 11.6.0; 12.0.0 |
| CVE-2015-8022 | 7.5 | Aug 19 | The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and… Affected: 11.6.0 |
| CVE-2017-6145 | 7.3 | Oct 20 | iControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 through 12.1.2 and 13.0.0 includes a service to convert authorization… Affected: 12.1.0; 12.1.1; 12.1.2; 13.0.0 |
| CVE-2026-39459 | 7.2 | May 13 | iControl REST and tmsh vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0 |
| CVE-2024-45844 | 7.2 | Oct 16 | BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings. Note: Software versions which have reached End… Affected: 15.1.0 before 15.1.10.5; 16.1.0 before 16.1.5; 17.1.0 before 17.1.1.4 |
| CVE-2023-42768 | 7.2 | Oct 10 | When a non-admin user has been assigned an administrator role via an iControl REST PUT request and later the user's role is reverted back to a non-admin role via the Configuration… Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4 |
| CVE-2018-5511 | 7.2 | Apr 13 | On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP… Affected: 13.0.0; 13.1.0 |
| CVE-2026-24464 | 6.8 | May 13 | Appliance mode iControl REST vulnerability Affected: 16.1.0 through 16.1.6; 21.0.0; 17.1.0 through 17.1.3; 17.5.0 through 17.5.1 |
| CVE-2026-42919 | 6.7 | May 13 | F5 BIG-IP Appliance Mode Vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 21.0.0; 16.1.0 through 16.1.6 |
| CVE-2026-41959 | 6.5 | May 13 | iControl and tmsh REST vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0 |
| CVE-2026-42937 | 6.5 | May 13 | iControl REST and tmsh vulnerability Affected: 16.1.0 through 16.1.6; 17.1.0 through 17.1.3.1; 17.5.0 through 17.5.1.4 |
| CVE-2026-35062 | 6.5 | May 13 | iControl SOAP vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0 |
| CVE-2026-42781 | 6.5 | May 13 | BIG-IP FastL4 virtual server vulnerability Affected: 21.0.0; 17.1.0 through 17.1.3; 17.5.0 through 17.5.1 |
| CVE-2026-40699 | 6.5 | May 13 | BIG-IP Configuration utility vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6 |
| CVE-2026-41219 | 6.5 | May 13 | BIG-IP QKView vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6 |
| CVE-2026-40462 | 6.5 | May 13 | iControl REST and tmsh vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 21.0.0; 16.1.0 through 16.1.6 |
| CVE-2025-59483 | 6.5 | Oct 15 | A validation vulnerability exists in an undisclosed URL in the Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1 |
| CVE-2024-32761 | 6.5 | May 8 | Under certain conditions, a data leak may occur in the Traffic Management Microkernels (TMMs) of BIG-IP tenants running on VELOS and rSeries platforms Affected: 15.1.0 before 15.1.10 |
| CVE-2023-41964 | 6.5 | Oct 10 | The BIG-IP and BIG-IQ systems do not encrypt some sensitive information written to Database (DB) variables. Note: Software versions which have reached End of Technical Support… Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4 |
| CVE-2017-6158 | 6.5 | Apr 13 | In F5 BIG-IP 12.0.0-12.1.2, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 there is a vulnerability in TMM related to handling of invalid IP addresses Affected: 11.5.1 through 11.5.5; 11.6.0 through 11.6.1; 12.0.0 through 12.1.2; 11.2.1 |
| CVE-2017-6134 | 6.5 | Dec 21 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, 12.1.0 - 12.1.2 and 11.5.1 - 11.6.1, an undisclosed sequence… Affected: 11.5.1 through 11.6.1; 12.1.0 through 12.1.2; 13.0.0 |
| CVE-2017-6156 | 6.4 | Apr 13 | When the F5 BIG-IP 12.1.0-12.1.1, 11.6.0-11.6.1, 11.5.1-11.5.5, or 11.2.1 system is configured with a wildcard IPSec tunnel endpoint, it may allow a remote attacker to disrupt or… Affected: 11.5.1 through 11.5.5; 12.1.0 through 12.1.1; 11.2.1; 11.6.1 |
| CVE-2025-59269 | 6.1 | Oct 15 | A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the… Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1 |
| CVE-2024-33604 | 6.1 | May 8 | A reflected cross-site scripting (XSS) vulnerability exist in undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the… Affected: 15.1.0 before 15.1.10.4; 16.1.0 before 16.1.4.3; 17.1.0 before 17.1.1.3 |
| CVE-2023-3470 | 6.1 | Aug 2 | Specific F5 BIG-IP platforms with Cavium Nitrox FIPS HSM cards generate a deterministic password for the Crypto User account Affected: 13.1.0 before 13.1.4; 14.1.0 before 14.1.4; 15.1.0 |
| CVE-2023-38138 | 6.1 | Aug 2 | A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility which allows an attacker to run JavaScript in the context of… Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.5; 15.1.0 before 15.1.9.1; 16.1.0 before 16.1.3.5; 17.0.0 before 17.1.0.2 |
| CVE-2023-27378 | 6.1 | May 3 | Multiple reflected cross-site scripting (XSS) vulnerabilities exist in undisclosed pages of the BIG-IP Configuration utility which allow an attacker to run JavaScript in the… Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.4; 15.1.0 before 15.1.8.2; 16.1.0 before 16.1.3.4; 17.0.0 before 17.1.0.1 |
| CVE-2019-6625 | 6.1 | Jul 3 | On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4, and 11.5.1-11.6.4, a reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page… Affected: 11.5.1 through 11.6.3; 12.1.0 before 12.1.4.1; 13.0.0 before 13.1.1.5; 14.0.0 before 14.0.0.5; 14.1.0 before 14.1.0.6 |
| CVE-2018-5521 | 6.1 | Jun 1 | On F5 BIG-IP 12.1.0-12.1.3.1, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, carefully crafted URLs can be used to reflect arbitrary content into GeoIP lookup responses, potentially… Affected: 11.5.1 through 11.5.5; 11.6.1 through 11.6.3; 12.1.0 through 12.1.3; 11.2.1 |
| CVE-2025-58153 | 5.9 | Oct 15 | Under undisclosed traffic conditions along with conditions beyond the attacker's control, hardware systems with a High-Speed Bridge (HSB) may experience a lockup of the HSB Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.5.0 |
| CVE-2024-28889 | 5.9 | May 8 | When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can… Affected: 15.1.0 before 15.1.10.4; 16.1.0 before 16.1.4.3; 17.1.0 before 17.1.1.3 |
| CVE-2018-5522 | 5.9 | Jun 1 | On F5 BIG-IP 13.0.0, 12.0.0-12.1.2, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, when processing DIAMETER transactions with carefully crafted attribute-value pairs, TMM may crash Affected: 11.5.0 through 11.5.5; 11.6.0 through 11.6.3; 12.0.0 through 12.1.2; 11.2.1; 13.0.0 |
| CVE-2018-5501 | 5.9 | Mar 1 | In some circumstances, on F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, any 11.6.x or 11.5.x release, or 11.2.1, TCP DNS profile allows excessive buffering due to lack of… Affected: 11.5.1 through 11.5.4; 11.6.1 through 11.6.2; 12.1.0 through 12.1.3; 11.2.1; 13.0.0 |
| CVE-2018-5500 | 5.9 | Mar 1 | On F5 BIG-IP systems running 13.0.0, 12.1.0 - 12.1.3.1, or 11.6.1 - 11.6.2, every Multipath TCP (MCTCP) connection established leaks a small amount of memory Affected: 11.6.1 through 11.6.2; 12.1.0 through 12.1.3.1; 13.0.0 |
| CVE-2017-6136 | 5.9 | Dec 21 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.0.0 - 12.1.2, undisclosed traffic patterns sent to… Affected: 12.1.0 through 12.1.2; 13.0.0 |
| CVE-2017-6162 | 5.9 | Oct 27 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4,… Affected: 1.0.0 |
| CVE-2017-6159 | 5.9 | Oct 27 | F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 are vulnerable to a denial of service… Affected: 1.0.0 |
| CVE-2017-6141 | 5.9 | Oct 20 | In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 through 12.1.2, certain values in a TLS abbreviated handshake when using a client SSL profile with… Affected: 12.1.0; 12.1.1; 12.1.2 |
| CVE-2017-6147 | 5.9 | Sep 18 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing… Affected: 12.1.2; 13.0.0 |
| CVE-2017-6137 | 5.9 | May 9 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, 12.0.0 HF3, 12.0.0 HF4, and 12.1.0… Affected: 11.6.1; 12.0.0; 12.1.0; 12.1.1; 12.1.2 |
| CVE-2016-9245 | 5.9 | Mar 7 | In F5 BIG-IP systems 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart Affected: 12.1.0; 12.1.1; 12.1.2 |
| CVE-2016-9247 | 5.9 | Jan 10 | Under certain conditions for BIG-IP systems using a virtual server with an associated FastL4 profile and TCP analytics profile, a specific sequence of packets may cause the… Affected: 12.1.0; 12.1.1 |
| CVE-2023-43485 | 5.5 | Oct 10 | When TACACS+ audit forwarding is configured on BIG-IP or BIG-IQ system, sharedsecret is logged in plaintext in the audit log. Note: Software versions which have reached End of… Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4 |
| CVE-2016-7474 | 5.5 | Mar 27 | In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain normally… Affected: 11.6.0; 11.6.1; 12.0.0; 12.1.0; 12.1.1 |
| CVE-2026-40703 | 5.4 | May 13 | BIG-IP Configuration utility CSRF vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6 |
| CVE-2023-38423 | 5.4 | Aug 2 | A cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the… Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.5; 15.1.0 before 15.1.9.1; 16.1.0 before 16.1.3.5; 17.0.0 before 17.1.0.2 |
| CVE-2018-5518 | 5.4 | May 2 | On F5 BIG-IP 13.0.0-13.1.0.5 or 12.0.0-12.1.3.3, malicious root users with access to a VCMP guest can cause a disruption of service on adjacent VCMP guests running on the same… Affected: 12.0.0 through 12.1.3; 13.0.0 through 13.1.0 |
| CVE-2016-7469 | 5.4 | Jun 9 | A stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link… Affected: 11.6.0; 11.6.1; 12.0.0; 12.1.0; 12.1.1; 12.1.2 |
| CVE-2026-34019 | 5.3 | May 13 | BIG-IP BFD vulnerability Affected: 17.1.0 through 17.1.2; 17.5.0; 16.1.0 through 16.1.6 |
| CVE-2026-40435 | 5.3 | May 13 | BIG-IP httpd access control vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6 |