BW
Product
Big-ip Websafe
On CISA KEVExploited in the wildRansomware-linked
175
CVEs
3
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 7High 100Medium 66Low 2
Watch
Add Big-ip Websafe to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-46747 RansomwareIn wildKEV | 9.8 | Oct 26 | BIG-IP Configuration utility unauthenticated remote code execution vulnerability Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 through 15.1.10; 16.1.0 through 16.1.4; 17.1.0 through 17.1.1 |
| CVE-2023-41373 | 9.9 | Oct 10 | A directory traversal vulnerability exists in the BIG-IP Configuration Utility that may allow an authenticated attacker to execute commands on the BIG-IP system Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.6; 15.1.0 before 15.1.10.2; 16.1.0 before 16.1.4.1; 17.1.0 before 17.1.0.3 |
| CVE-2018-5506 | 9.8 | Apr 13 | In F5 BIG-IP 13.0.0, 12.1.0-12.1.2, 11.6.1, 11.5.1-11.5.5, or 11.2.1 the Apache modules apache_auth_token_mod and mod_auth_f5_auth_token.cpp allow possible unauthenticated… Affected: 11.5.1 through 11.5.5; 12.1.0 through 12.1.3.1; 11.2.1; 11.6.1; 13.0.0 |
| CVE-2017-6165 | 9.8 | Oct 20 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0.0 through 12.1.2 on… Affected: 11.5.1; 11.5.2; 11.5.3; 11.5.4; 11.6.0; 11.6.1; +4 more |
| CVE-2017-6131 | 9.8 | May 23 | In some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may contain a default administrative password which could be used to remotely log into… Affected: 12.0.0; 12.1.0; 12.1.1; 12.1.2; 13.0.0 |
| CVE-2016-5700 | 9.8 | Oct 3 | Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2,… Affected: 11.6.0; 11.6.1; 12.0.0; 12.1.0 |
| CVE-2026-41225 | 9.1 | May 13 | iControl REST vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0 |
Showing 7