F5 BIG-IP vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
166 matching records
- Critical9.3F5 BIG-IP Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.30%Oct 15, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: cpumap: Fix memory leak in cpu_map_update_elem Syzkaller reported a memory leak as follows: BUG: memory leaCheck if you run itEPSS 0.15%Sep 18, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Fix panic during namespace deletion with VF The existing code move the VF NIC to new namespace when NCheck if you run itEPSS 0.18%Sep 4, 2025
- Medium6.9An HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit (HTTP/2 MadeYouReset AttCheck if you run itEPSS 0.49%Aug 13, 2025
- Medium6.3NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memoryCheck if you run itEPSS 0.41%Aug 13, 2025
- High8.7When Network Access is configured on a BIG-IP APM virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.Check if you run itEPSS 0.34%Aug 13, 2025
- High8.8F5 Access for Android before version 3.1.2 which uses HTTPS does not verify the remote endpoint identity.Check if you run itEPSS 0.25%Aug 13, 2025
- High8.7When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman (ADH) ciphers enabled, undisclosed requests can cCheck if you run itEPSS 0.34%Aug 13, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().Check if you run itEPSS 0.56%Jul 4, 2025
- High8.7When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standby BIG-IP systems in aCheck if you run itEPSS 0.44%May 7, 2025
- High8.7When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to terminate.Check if you run itEPSS 0.44%May 7, 2025
- High8.7When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual server, undisclosed requCheck if you run itEPSS 0.44%May 7, 2025
- High8.5When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacCheck this weekEPSS 24.30%May 7, 2025
- High8.7When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requCheck if you run itEPSS 0.44%May 7, 2025
- High8.7When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate.Check if you run itEPSS 0.43%May 7, 2025
- High8.7When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization.Check if you run itEPSS 0.44%May 7, 2025
- High8.7On F5OS, an improper authorization vulnerability exists where remotely authenticated users (LDAP, RADIUS, TACACS+) may be authorized with higher privilege F5OS roles.Check if you run itEPSS 0.39%May 7, 2025
- High8.3When running in Appliance mode, an authenticated attacker assigned the Administrator or Resource Administrator role may be able to bypass Appliance mode restrictions utilizing systCheck if you run itEPSS 0.17%May 7, 2025
- Critical9.2On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode; access via SSH key-basedCheck if you run itEPSS 0.44%May 7, 2025
- High8.7When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.Check if you run itEPSS 0.43%May 7, 2025
- High8.7When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.Check if you run itEPSS 0.43%May 7, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: do not check WED status for non-mmio devices WED is supported just for mmio devices, so do nCheck if you run itEPSS 0.21%May 2, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: block: Fix possible memory leak for rq_wb on add_disk failure kmemleak reported memory leaks in device_add_disk(Check if you run itEPSS 0.20%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: ext4: ignore xattrs past end Once inside 'ext4_xattr_inode_dec_ref_all' we should ignore xattrs entries past theCheck if you run itEPSS 0.22%May 1, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mptcp: always handle address removal under msk socket lock Syzkaller reported a lockdep splat in th…Check if you run itEPSS 0.23%Mar 27, 2025