F5 BIG-IP vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
166 matching records
- High8.5When running in Appliance mode, a highly privileged authenticated attacker with access to SCP and SFTP may be able to bypass Appliance mode restrictions using undisclosed commands.Check if you run itEPSS 0.44%Oct 15, 2025
- High8.7Undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.Check if you run itEPSS 0.24%Oct 15, 2025
- Medium4.6When a highly-privileged, authenticated attacker attempts to initialize the rSeries FIPS module using a password with special shell metacharacters, arbitrary system commands may beCheck if you run itEPSS 0.18%Oct 15, 2025
- High7.7When the Allowed IP Addresses feature is configured on the F5OS-C partition control plane, undisclosed traffic can cause multiple containers to terminate.Check if you run itEPSS 0.34%Oct 15, 2025
- High8.7When a classification profile is configured on a virtual server without an HTTP or HTTP/2 profile, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminCheck if you run itEPSS 0.35%Oct 15, 2025
- High8.7When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object uses the embedded Packet Velocity Acceleration (ePVA) feature,Check if you run itEPSS 0.35%Oct 15, 2025
- High7.1On BIG-IP Next CNF, BIG-IP Next SPK, and BIG-IP Next for Kubernetes systems, repeated undisclosed API calls can cause the Traffic Management Microkernel (TMM) to terminate.Check if you run itEPSS 0.31%Oct 15, 2025
- Medium6.0When an iRule is configured on a virtual server via the declarative API, upon re-instantiation, the cleanup process can cause an increase in the Traffic Management Microkernel (TMMCheck if you run itEPSS 0.31%Oct 15, 2025
- High8.7When BIG-IP SSL Orchestrator is enabled, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.Check if you run itEPSS 0.35%Oct 15, 2025
- High8.7When a BIG-IP Advanced WAF or ASM security policy is configured with a URL greater than 1024 characters in length for the Data Guard Protection Enforcement setting, either manuallyCheck if you run itEPSS 0.35%Oct 15, 2025
- Medium6.3On BIG-IP systems, undisclosed traffic can cause data corruption and unauthorized data modification in protocols which do not have message integrity protection.Check if you run itEPSS 0.25%Oct 15, 2025
- High8.7When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilization.Check if you run itEPSS 0.35%Oct 15, 2025
- High8.7When BIG-IP SSL Orchestrator explicit forward proxy is configured on a virtual server and the proxy connect feature is enabled, undisclosed traffic may cause memory corruption.Check if you run itEPSS 0.35%Oct 15, 2025
- High7.1When SNMP is configured on F5OS Appliance and Chassis systems, undisclosed requests can cause an increase in SNMP memory resource utilization.Check if you run itEPSS 0.38%Oct 15, 2025
- High8.7When the BIG-IP Advanced WAF and ASM security policy and a server-side HTTP/2 profile are configured on a virtual server, undisclosed traffic can cause the Traffic Management MicroCheck if you run itEPSS 0.38%Oct 15, 2025
- High8.7When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.Check if you run itEPSS 0.43%Oct 15, 2025
- High8.7When Diffie-Hellman (DH) group Elliptic Curve Cryptography (ECC) Brainpool curves are configured in an SSL profile's Cipher Rule or Cipher Group, and that profile is applied to a vCheck if you run itEPSS 0.44%Oct 15, 2025
- High8.2Under undisclosed traffic conditions along with conditions beyond the attacker's control, hardware systems with a High-Speed Bridge (HSB) may experience a lockup of the HSB.Check if you run itEPSS 0.23%Oct 15, 2025
- High8.7When a TCP profile with Multipath TCP (MPTCP) enabled is configured on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the TraffCheck if you run itEPSS 0.44%Oct 15, 2025
- High8.7When a BIG-IP AFM denial-of-service (DoS) protection profile is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) process to tCheck if you run itEPSS 0.37%Oct 15, 2025
- Medium6.9When BIG-IP Advanced WAF is configured on a virtual server with Server-Side Request Forgery (SSRF) protection or when an NGINX server is configured with App Protect Bot Defense, unCheck if you run itEPSS 0.39%Oct 15, 2025
- High8.4A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of theCheck if you run itEPSS 0.28%Oct 15, 2025
- Medium6.9On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated remote attacker through the Configuration utility.Check if you run itEPSS 0.40%Oct 15, 2025
- High7.1When the BIG-IP system is configured as both a Security Assertion Markup Language (SAML) service provider (SP) and Identity Provider (IdP), with single logout (SLO) enabled on an aCheck if you run itEPSS 0.39%Oct 15, 2025
- High8.7When an iRule using an ILX::call command is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.Check if you run itEPSS 0.35%Oct 15, 2025