Skip to contentF5 Big-ip vulnerabilities
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn versions 15.0.x before 15.1.0 and 14.1.x before 14.1.4, the BIG-IP system provides an option...CVE-2021-229997.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x...CVE-2021-230037.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2, if the tmm.http.rfc.enforcement BigDB key is...CVE-2021-230007.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x...CVE-2021-229946.1 Medium
- f5 big-ip, big-ip traffic management microkernel, big-ip access policy manager +13 more +15 moreOn BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x...CVE-2021-22991In KEVEPSS 62.4%9.8 Critical
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip advanced web application firewall +11 more +13 moreOn BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x...CVE-2021-229899.1 Critical
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip advanced web application firewall +11 more +13 moreOn BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x...CVE-2021-22992EPSS 67.6%9.8 Critical
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip advanced web application firewall +11 more +13 moreOn BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x...CVE-2021-229907.2 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip advanced web application firewall +11 more +13 moreOn BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x...CVE-2021-22987EPSS 13.6%9.9 Critical
- f5 big-ip and big-iq centralized management, big-ip access policy manager, big-ip advanced firewall manager +13 more +15 moreOn BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x...CVE-2021-22986In KEVPublic exploitEPSS 99.9%9.8 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x...CVE-2021-22988EPSS 10.4%8.8 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3, cooperation between malicious HTTP client...CVE-2021-229777.5 High
- f5 big-ip advanced web application firewall, big-ip application security manager +1 moreOn BIG-IP Advanced WAF and ASM version 15.1.x before 15.1.0.2, 15.0.x before 15.0.1.4, 14.1.x...CVE-2021-229846.1 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, 13.1.x...CVE-2021-229788.3 High
- f5 big-ip afm, big-ip advanced firewall manager +1 moreOn BIG-IP AFM version 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.5,...CVE-2021-229835.4 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.2.8, 13.1.x...CVE-2021-229796.1 Medium
- f5 access policy manager clients, big-ip access policy manager +1 moreIn Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1...CVE-2021-229807.8 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn all versions of BIG-IP 12.1.x and 11.6.x, the original TLS protocol includes a weakness in the...CVE-2021-229814.8 Medium
- f5 big-ip apm, big-ip application security manager +1 moreOn BIG-IP APM version 16.0.x before 16.0.1.1, under certain conditions, when processing VPN...CVE-2021-229857.5 High
- f5 big-ip domain name system, big-ip global traffic manager +1 moreOn BIG-IP DNS and GTM version 13.1.x before 13.1.0.4, and all versions of 12.1.x and 11.6.x,...CVE-2021-229827.2 High
- f5 big-ip advanced web application firewall, big-ip application security manager +1 moreOn BIG-IP Advanced WAF and ASM version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x...CVE-2021-229767.5 High
- f5 big-ip, big-iq, big-ip access policy manager, big-ip advanced firewall manager +13 more +15 moreOn BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, and 13.1...CVE-2021-229747.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +8 more +10 moreOn BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x...CVE-2021-229737.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, and 14.1.x before 14.1.3.1,...CVE-2021-229757.5 High
- f5 big-ip advanced web application firewall, big-ip application security manager +1 moreOn BIG-IP ASM & Advanced WAF versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, under...CVE-2020-277287.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreIn versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2,...CVE-2020-277296.1 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.3, a cross-site scripting (XSS)...CVE-2020-277196.1 Medium
- f5 big-ip carrier-grade nat, big-ip local traffic manager +1 moreOn BIG-IP LTM/CGNAT version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5,...CVE-2020-277207.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreIn BIG-IP APM versions 15.0.0-15.0.1.3, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, under certain...CVE-2020-277226.5 Medium
- f5 big-ip dns, big-ip domain name system +1 moreOn BIG-IP DNS 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, and 12.1.0-12.1.5...CVE-2020-277177.5 High
- f5 big-ip afm, big-ip advanced firewall manager +1 moreOn the BIG-IP AFM version 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.5, when a Protocol...CVE-2020-277147.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreIn versions 14.1.0-14.1.3 and 13.1.0-13.1.3.4, a BIG-IP APM virtual server processing PingAccess...CVE-2020-277237.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP 15.1.0-15.1.0.5 and 14.1.0-14.1.3, crafted TLS request to the BIG-IP management...CVE-2020-277157.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreOn versions 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.5, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2...CVE-2020-277167.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreIn versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.2...CVE-2020-277266.1 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, when an...CVE-2020-277274.9 Medium
- f5 big-ip domain name system, big-ip global traffic manager, big-ip link controller +2 moreIn version 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2...CVE-2020-277254.3 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreIn BIG-IP APM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.3, 13.1.0...CVE-2020-277246.5 Medium
- f5 big-ip advanced web application firewall, big-ip application security manager +1 moreWhen a BIG-IP ASM or Advanced WAF system running version 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0...CVE-2020-277187.5 High
- f5 big-ip domain name system, big-ip global traffic manager +1 moreIn versions 16.0.0-16.0.0.1, 15.1.0-15.1.1, 14.1.0-14.1.3, 13.1.0-13.1.3.5, 12.1.0-12.1.5.2, and...CVE-2020-277217.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreOn BIG-IP versions 14.0.0-14.0.1 and 13.1.0-13.1.3.4, certain traffic pattern sent to a virtual...CVE-2020-59497.5 High
- f5 big-ip, big-ip advanced firewall manager +1 moreIn certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied...CVE-2020-277137.5 High
- f5 big-ip, big-ip advanced firewall manager +1 moreOn BIG-IP 14.1.0-14.1.2.6, undisclosed endpoints in iControl REST allow for a reflected XSS...CVE-2020-59505.3 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12...CVE-2020-59489.6 Critical
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip advanced web application firewall +11 more +13 moreIn versions 16.0.0-16.0.0.1 and 15.1.0-15.1.1, on specific BIG-IP platforms, attackers may be...CVE-2020-59474.3 Medium
- f5 big-ip advanced web application firewall, big-ip fraud protection service +1 moreIn BIG-IP Advanced WAF and FPS versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7,...CVE-2020-59467.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn versions 14.1.0-14.1.0.1 and 14.1.2.5-14.1.2.7, when a BIG-IP object is created or listed...CVE-2020-59436.5 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreIn BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.7, undisclosed TMUI page...CVE-2020-59458.4 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreIn versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.1.0-14.1.2.3, a stored cross-site scripting ...CVE-2020-59405.4 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreOn BIG-IP versions 16.0.0-16.0.0.1 and 15.1.0-15.1.0.5, using the RESOLV::lookup command within...CVE-2020-59417.5 High
- Show moreLoading…