All vulnerabilities
154 / 154
Sort
7.5
CVE-2023-44487ANC KEV
The HTTP/2 protocol allows a denial of service (server resource consumption) because request ca…
2023-01-01MicrosoftKEV
EPSS100.0%
pct 100
9.8
CVE-2020-5902CVE KEV
In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6…
2020-01-01KEV
EPSS100.0%
pct 100
9.8
CVE-2021-22986CVE KEV
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x…
2021-01-01KEV
EPSS99.9%
pct 99
9.8
CVE-2023-46747CVE KEV
Undisclosed requests may bypass configuration utility authentication, allowing an attacker with…
2023-01-01KEV
EPSS96.5%
pct 99
9.8
CVE-2021-22992CVE
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x…
2021-01-01Pre-auth
EPSS72.7%
pct 99
9.8
CVE-2021-22991CVE KEV
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x…
2021-01-01KEV
EPSS61.1%
pct 99
8.5
CVE-2025-31644CVE
When running in Appliance mode, a command injection vulnerability exists in an undisclosed iCon…
2025-01-01
EPSS24.7%
pct 97
7.5
CVE-2002-20001CVE
The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to sen…
2002-01-01Pre-auth
EPSS23.1%
pct 97
9.9
CVE-2021-22987CVE
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x…
2021-01-01
EPSS13.7%
pct 95
8.6
CVE-2024-45844CVE
BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regar…
2024-01-01
EPSS10.6%
pct 95
8.8
CVE-2021-22988CVE
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x…
2021-01-01
EPSS10.4%
pct 95
7.2
CVE-2021-22990CVE
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x…
2021-01-01
EPSS8.8%
pct 94
9.1
CVE-2021-22989CVE
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x…
2021-01-01
EPSS8.8%
pct 94
8.7
CVE-2025-20029CVE
Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save comma…
2025-01-01
EPSS7.8%
pct 93
8.8
CVE-2023-46748CVE KEV
An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which
…
2023-01-01KEV
EPSS4.5%
pct 90
9.9
CVE-2023-41373CVE
A directory traversal vulnerability exists in the BIG-IP Configuration Utility that may allow …
2023-01-01
EPSS2.4%
pct 81
8.8
CVE-2021-23025CVE
On version 15.1.x before 15.1.0.5, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all vers…
2021-01-01
EPSS2.2%
pct 80
9.9
CVE-2021-23031CVE
On version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before …
2021-01-01
EPSS2.0%
pct 78
5.3
CVE-2021-23007CVE
On BIG-IP versions 14.1.4 and 16.0.1.1, when the Traffic Management Microkernel (TMM) process h…
2021-01-01Pre-auth
EPSS1.6%
pct 72
7.5
CVE-2023-23552CVE
On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.0 before 15.1.8, 14.1.x before…
2023-01-01Pre-auth
EPSS1.5%
pct 71
7.2
CVE-2022-27806CVE
On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP Advanced WAF…
2022-01-01
EPSS1.5%
pct 70
7.2
CVE-2021-23015CVE
On BIG-IP 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.0.8 through 13.1.3.6, and all vers…
2021-01-01
EPSS1.3%
pct 67
5.9
CVE-2020-5929CVE
In versions 13.0.0-13.0.0 HF2, 12.1.0-12.1.2 HF1, and 11.6.1-11.6.2, BIG-IP platforms with Cavi…
2020-01-01Pre-auth
EPSS1.2%
pct 64
4.3
CVE-2023-28406CVE
A directory traversal vulnerability exists in an undisclosed page of the BIG-IP Configuration u…
2023-01-01
EPSS1.2%
pct 63
7.2
CVE-2022-41617CVE
In versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and 13.1.x …
2022-01-01
EPSS1.1%
pct 61
6.9
CVE-2025-54755CVE
A directory traversal vulnerability exists in TMUI that allows a highly privileged authenticate…
2025-01-01
EPSS1.1%
pct 61
7.5
CVE-2020-5949CVE
On BIG-IP versions 14.0.0-14.0.1 and 13.1.0-13.1.3.4, certain traffic pattern sent to a virtual…
2020-01-01Pre-auth
EPSS1.0%
pct 59
7.5
CVE-2020-5946CVE
In BIG-IP Advanced WAF and FPS versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, …
2020-01-01Pre-auth
EPSS1.0%
pct 59
7.5
CVE-2020-27718CVE
When a BIG-IP ASM or Advanced WAF system running version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1…
2020-01-01Pre-auth
EPSS1.0%
pct 59
7.5
CVE-2021-22977CVE
On BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3, cooperation between malicious HTTP client …
2021-01-01Pre-auth
EPSS1.0%
pct 58
7.5
CVE-2020-5939CVE
In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.3, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, and 13.1.0-13.1…
2020-01-01Pre-auth
EPSS1.0%
pct 58
7.5
CVE-2020-27728CVE
On BIG-IP ASM & Advanced WAF versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, unde…
2020-01-01Pre-auth
EPSS1.0%
pct 58
7.5
CVE-2021-23009CVE
On BIG-IP version 16.0.x before 16.0.1.1 and 15.1.x before 15.1.3, malformed HTTP/2 requests ma…
2021-01-01Pre-auth
EPSS1.0%
pct 57
7.5
CVE-2021-23011CVE
On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 1…
2021-01-01Pre-auth
EPSS1.0%
pct 56
7.5
CVE-2021-23004CVE
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x…
2021-01-01Pre-auth
EPSS1.0%
pct 56
7.5
CVE-2021-23003CVE
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x…
2021-01-01Pre-auth
EPSS1.0%
pct 56
7.5
CVE-2021-22999CVE
On versions 15.0.x before 15.1.0 and 14.1.x before 14.1.4, the BIG-IP system provides an option…
2021-01-01Pre-auth
EPSS1.0%
pct 56
7.5
CVE-2021-22976CVE
On BIG-IP Advanced WAF and ASM version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x bef…
2021-01-01Pre-auth
EPSS1.0%
pct 56
5.3
CVE-2021-22998CVE
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x…
2021-01-01Pre-auth
EPSS0.9%
pct 56
7.5
CVE-2021-23000CVE
On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2, if the tmm.http.rfc.enforcement BigDB key is…
2021-01-01Pre-auth
EPSS0.9%
pct 55
Select a vulnerability on the left to open the preview.