Known vulnerabilities in BIG-IP 20.2.1

Software: BIG-IP
Version: 20.2.1
Software CPE: cpe:2.3:h:f5_networks:big-ip:*:*:*:*:*:*:*:*
Total vulnerabilities: 6
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BIG-IP version 20.2.1 BIG-IP 20.2.1 is affected by 6 vulnerabilities: 4 medium, 2 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114086 - Resource exhaustion
CVE-2025-54500
CWE-400 Medium
No
No
16.1.6.0.27.3, 17.1.2.2.0.259.12, 17.5.1.0.80.7 14.08.2025 SB2025081450
SB2025081451
SB2025081452
#VU108775 - Resource exhaustion
CVE-2025-36504
CWE-400 Medium
No
No
16.1.6, 17.1.2, 20.3.0 07.05.2025 SB2025050780
#VU104034 - Improper input validation
CVE-2025-26466
CWE-20 Medium
Public exploit available
No
- 18.02.2025 SB2025021815
SB2025021830
SB2025021840
and 25 more
#VU94841 - Out-of-bounds read
CVE-2024-41091
CWE-125 Low
No
No
20.3.0 29.07.2024 SB2024072937
SB2024080967
SB2024080969
and 70 more
#VU94840 - Out-of-bounds read
CVE-2024-41090
CWE-125 Low
No
No
20.3.0 29.07.2024 SB2024072936
SB2024080967
SB2024080969
and 86 more
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51385
CWE-78 Medium
Public exploit available
No
- 26.12.2023 SB2023121905
SB2023122710
SB2023122801
and 65 more