f5
1,031 tracked vulnerabilities.
CVE-2025-41433
HIGH
F5 BIG-IP 15.1.0-15.1.10 - Denial of Service via SIP MRF ALG Profile
May 07, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-41431
HIGH
BIG-IP - Out-of-bounds Write via Connection Mirroring
May 07, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-41414
HIGH
F5 BIG-IP 15.1.0-15.1.9 - Denial of Service via HTTP/2 Profile
May 07, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-41399
HIGH
F5 BIG-IP 15.1.0-15.1.8 - Memory Resource Exhaustion via SCTP Profile
May 07, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-36557
HIGH
F5 BIG-IP 16.1.0-16.1.4 - Denial of Service via HTTP Profile RFC Compliance Enforcement
May 07, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-36546
HIGH
F5OS-A 1.5.1-1.5.3 and F5OS-C 1.6.0-1.6.2 - Incorrect Authorization via SSH Key-Based Authentication
May 07, 2025
CVSS 8.1
EPSS 0.00
CVE-2025-36525
HIGH
F5 BIG-IP Access Policy Manager 15.1.0-15.1.10.7.0.4.5 - Denial of Service via PingAccess Profile
May 07, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-36504
HIGH
F5 BIG-IP 16.1.0-16.1.5 - Memory Exhaustion via HTTP/2 httprouter Profile
May 07, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-35995
HIGH
BIG-IP Policy Enforcement Manager 15.1.0-15.1.10.7.0.4.5 - Out-of-bounds Read via URL Categorization Policy
May 07, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-31644
HIGH
BIG-IP TMOS Shell - Command Injection
May 07, 2025
CVSS 8.7
EPSS 0.28
CVE-2025-1695
MEDIUM
NGINX Unit 1.29.1-1.34.1 - Denial of Service via Java Language Module Infinite Loop
Mar 04, 2025
CVSS 5.3
EPSS 0.01
CVE-2025-24497
HIGH
F5 BIG-IP Policy Enforcement Manager 17.1.0-17.1.1 - Denial of Service via URL Categorization
Feb 05, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-24326
HIGH
F5 BIG-IP ASM 15.1.0-15.1.10.6.0.11.6 - Out-of-bounds Write via TLS Signatures
Feb 05, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-24320
HIGH
BIG-IP 15.1.0-15.1.10.6 - Stored Cross-Site Scripting in Configuration Utility
Feb 05, 2025
CVSS 8.0
EPSS 0.00
CVE-2025-24319
MEDIUM
F5 BIG-IP Next Central Manager 20.2.0-20.2.x - Denial of Service via API Request
Feb 05, 2025
CVSS 6.5
EPSS 0.00
CVE-2025-24312
HIGH
F5 Big-ip Advanced Firewall Manager < 15.1.10.6.0.11.6 - Resource Allocation Without Limits
Feb 05, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-23419
MEDIUM
F5 NGINX 1.11.4-1.26.2 and NGINX Plus R28-R31 - Incorrect Authorization via TLS Session Resumption
Feb 05, 2025
CVSS 4.3
EPSS 0.03
CVE-2025-23415
LOW
F5 BIG-IP APM 15.1.0-15.1.10.6.0.11.6 - Insufficient Verification of Data Authenticity in VPN Endpoint Inspection
Feb 05, 2025
CVSS 3.1
EPSS 0.00
CVE-2025-23413
MEDIUM
F5 BIG-IP Next Central Manager 20.2.0-20.2.x - Sensitive Information Disclosure in pgaudit Log Files
Feb 05, 2025
CVSS 4.4
EPSS 0.00
CVE-2025-23412
HIGH
F5 BIG-IP Access Policy Manager 16.1.3-16.1.5 - Denial of Service via Undisclosed Request
Feb 05, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-23239
HIGH
F5 BIG-IP - Authenticated Remote Command Injection via iControl REST Endpoint
Feb 05, 2025
CVSS 8.7
EPSS 0.01
CVE-2025-22891
HIGH
BIG-IP Policy Enforcement Manager 15.1.0-15.1.10.6.0.11.6 - Denial of Service via Diameter Endpoint Profile
Feb 05, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-22846
HIGH
F5 BIG-IP Next Service Proxy for Kubernetes 1.7.0-1.7.6 - Denial of Service via SIP Session and Router ALG Profiles
Feb 05, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-21091
HIGH
BIG-IP 15.1.0-15.1.10 - Memory Leak via SNMP Requests
Feb 05, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-21087
HIGH
F5 BIG-IP 15.1.0-15.1.9 - Uncontrolled Resource Consumption via SSL Profile or DNSSEC Operations
Feb 05, 2025
CVSS 7.5
EPSS 0.00
Products
big-ip_access_policy_manager 628
big-ip_application_security_manager 581
big-ip_advanced_firewall_manager 552
big-ip_local_traffic_manager 541
big-ip_policy_enforcement_manager 533
big-ip_link_controller 525
big-ip_application_acceleration_manager 524
big-ip_analytics 511
big-ip_global_traffic_manager 490
big-ip_domain_name_system 469
big-ip_fraud_protection_service 405
big-ip_webaccelerator 297
big-ip_edge_gateway 293
big-ip_advanced_web_application_firewall 195
big-ip_websafe 175
big-ip_ddos_hybrid_defender 166
big-ip_ssl_orchestrator 147
big-ip_carrier-grade_nat 109
big-ip_application_visibility_and_reporting 108
big-ip_container_ingress_services 86
big-ip_automation_toolchain 85
big-iq_centralized_management 85
big-ip_protocol_security_module 61
BIG-IP 46
nginx 42
njs 40
enterprise_manager 39
big-ip_wan_optimization_manager 38
traffix_signaling_delivery_controller 31
ssl_orchestrator 27
Quick Filters