Priority CRITICAL 100KEV
Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system command…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.96715 · Published 2023-10-26 · No fix listed CWE-288
Priority CRITICAL 97KEV
An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and/or…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04262 · Published 2023-10-26 · No fix listed CWE-89
Priority HIGH 73
Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticated attacker to execute arbitrary system commands.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.0715 · Published 2025-02-05 · Fixed in 17.1.2.1, 16.1.5.2 +1 CWE-78
Priority HIGH 72
When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacker with administrator role privileges t…
CVSS 4.0HIGH 8.5· Network · High privileges · No interaction · EPSS 0.24304 · Published 2025-05-07 · Fixed in 17.5.0, 17.1.2.2 +2 CWE-77
Priority HIGH 72
BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings.
CVSS 4.0HIGH 8.6· Network · High privileges · No interaction · EPSS 0.10644 · Published 2024-10-16 · Fixed in 17.1.1.4, 16.1.5 +1 CWE-306
Priority MEDIUM 45
When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed traffic can cause an increase in memory and CPU resource utilization.
CVSS 4.0HIGH 8.9· Network · No auth · No interaction · EPSS 0.00408 · Published 2025-02-05 · Fixed in 17.1.2, 20.1.0 CWE-400
Priority MEDIUM 45
When a BIG-IP message routing profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization.
CVSS 4.0HIGH 8.9· Network · No auth · No interaction · EPSS 0.00408 · Published 2025-02-05 · Fixed in 17.1.2 CWE-400
Priority MEDIUM 44
When SSL profiles are configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing new client connections.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00324 · Published 2026-05-13 · Fixed in 21.0.0, 17.5.1.4 +5 CWE-770
Priority MEDIUM 44
When an SSL profile is configured on a virtual server on BIG-IP Virtual Edition (VE) without Intel QuickAssist Technology (QAT) or on BIG-IP hardware platforms with the database variable crypto.hwacceleration set to disa…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00324 · Published 2026-05-13 · Fixed in 21.1.0, 21.0.0.1 +3 CWE-131
Priority MEDIUM 44
When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00348 · Published 2025-10-15 · Fixed in 17.5.1.3, 17.1.3 +2 CWE-415
Priority MEDIUM 44
When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilization.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00348 · Published 2025-10-15 · Fixed in 17.5.0, 17.1.2.2 +3 CWE-459
Priority MEDIUM 44
When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.0037 · Published 2025-10-15 · Fixed in 17.5.1, 17.1.3 +2 CWE-457
Priority MEDIUM 44
When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object uses the embedded Packet Velocity Acceleration (ePVA) feature, undisclosed traffic can cause the Traffi…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00348 · Published 2025-10-15 · Fixed in 17.5.1.3, 17.1.3 +2 CWE-705
Priority MEDIUM 44
When an iRule using an ILX::call command is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00348 · Published 2025-10-15 · Fixed in 17.5.1.3, 17.1.3 +2 CWE-120
Priority MEDIUM 44
When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman (ADH) ciphers enabled, undisclosed requests can cause the Traffic Management Microkernel…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00366 · Published 2025-08-13 · Fixed in 17.5.0, 17.1.2.2 +1 CWE-476
Priority MEDIUM 44
When a TCP profile with Multipath TCP (MPTCP) enabled is configured on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel (TMM) to termi…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00444 · Published 2025-10-15 · Fixed in 17.5.0, 17.1.2.2 +3 CWE-416
Priority MEDIUM 44
When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00429 · Published 2025-10-15 · Fixed in 17.5.0, 17.1.2.2 +3 CWE-770
Priority MEDIUM 44
When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Mi…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00445 · Published 2025-05-07 · Fixed in 17.5.0, 17.1.2 +1 CWE-476
Priority MEDIUM 44
When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00438 · Published 2025-05-07 · Fixed in 17.5.0, 17.1.2 +4 CWE-476
Priority MEDIUM 44
When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00438 · Published 2025-05-07 · Fixed in 17.5.0, 17.1.1 +6 CWE-404
Priority MEDIUM 44
When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00445 · Published 2025-05-07 · Fixed in 17.5.0, 17.1.2 +5 CWE-770
Priority MEDIUM 44
When SNMP v1 or v2c are disabled on the BIG-IP, undisclosed requests can cause an increase in memory resource utilization.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00452 · Published 2025-02-05 · Fixed in 17.1.2 CWE-401
Priority MEDIUM 44
When SIP session Application Level Gateway mode (ALG) profile with Passthru Mode enabled and SIP router ALG profile are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Manag…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00408 · Published 2025-02-05 · Fixed in 17.1.2, 16.1.5 CWE-476
Priority MEDIUM 44
When a stateless virtual server is configured on BIG-IP system with a High-Speed Bridge (HSB), undisclosed requests can cause TMM to terminate.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00481 · Published 2024-08-14 · Fixed in 17.1.1, 16.1.5 CWE-702
Priority MEDIUM 43
When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00263 · Published 2026-05-13 · Fixed in 21.1.0, 21.0.0.1 +2 CWE-835
Load more