Known vulnerabilities in BIG-IP - page 3

Software: BIG-IP
Software CPE: cpe:2.3:h:f5_networks:big-ip:*:*:*:*:*:*:*:*
Total vulnerabilities: 384
Public exploits: 33
Known exploited (KEV): 10

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting BIG-IP BIG-IP is affected by 384 known vulnerabilities: 3 critical, 19 high, 218 medium, 144 low Critical High Medium Low

Vulnerabilities (384)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114086 - Resource exhaustion
CVE-2025-54500
CWE-400 Medium
No
No
16.1.6.0.27.3, 17.1.2.2.0.259.12, 17.5.1.0.80.7 14.08.2025 SB2025081450
SB2025081451
SB2025081452
#VU114083 - NULL Pointer Dereference
CVE-2025-52585
CWE-476 Medium
No
No
16.1.6, 17.1.2.2 14.08.2025 SB2025081428
#VU112734 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-42516
CWE-113 Low
No
No
- 10.07.2025 SB2025071040
SB2025071710
SB2025071764
and 37 more
#VU112733 - Server-Side Request Forgery (SSRF)
CVE-2024-43204
CWE-918 Low
No
No
- 10.07.2025 SB2025071040
SB2025071710
SB2025071764
and 29 more
#VU109836 - Heap-based Buffer Overflow
CVE-2016-1840
CWE-122 Medium
No
No
12.1.2 27.05.2025 SB2016052010
SB2025052723
SB2016120821
#VU108778 - Out-of-bounds write
CVE-2025-41431
CWE-787 Medium
No
No
17.1.2.2 07.05.2025 SB2025050783
SB2025050784
#VU108775 - Resource exhaustion
CVE-2025-36504
CWE-400 Medium
No
No
16.1.6, 17.1.2, 20.3.0 07.05.2025 SB2025050780
#VU95157 - Incorrect Provision of Specified Functionality
CVE-2024-4032
CWE-684 Medium
No
No
- 02.08.2024 SB2024080203
SB2024080207
SB2024080209
and 101 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-38709
CWE-113 Medium
No
No
- 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 65 more
#VU87337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28757
CWE-611 Medium
No
No
17.1.2.2 11.03.2024 SB2024031135
SB2024031143
SB2024031144
and 75 more
#VU86707 - Server-Side Request Forgery (SSRF)
CVE-2024-24806
CWE-918 Medium
No
No
- 22.02.2024 SB2024022210
SB2024022214
SB2024022225
and 54 more
#VU61246 - Use After Free
CVE-2021-4083
CWE-416 Low
No
No
17.5.1 10.03.2022 SB2022031029
SB2022031033
SB2022031034
and 56 more
#VU53231 - Integer overflow
CVE-2021-32027
CWE-190 Medium
No
No
17.1.1 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 43 more
#VU53229 - Memory corruption
CVE-2020-0591
CWE-119 Low
No
No
- 13.05.2021 SB2021051312
SB2020120234
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022
CWE-79 Low
Available
No
- 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU31958 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2019-18348
CWE-74 Medium
No
No
- 23.10.2019 SB2019102324
SB2020052312
SB2020042173
and 14 more
#VU18829 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2019-9740
CWE-93 Medium
No
No
17.1.2.1, 17.5.1 19.06.2019 SB2019031318
SB2019062812
SB2019072603
and 33 more
#VU18828 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2019-9947
CWE-93 Medium
No
No
- 19.06.2019 SB2019031318
SB2019062812
SB2019072603
and 23 more
#VU17105 - Improper input validation
CVE-2016-10739
CWE-20 Low
No
No
- 22.01.2019 SB2019012201
SB2019042102
SB2019080723
and 9 more
#VU92508 - Permissions, Privileges, and Access Controls
CVE-2014-7822
CWE-264 Low
Available
No
12.0.0 16.03.2015 SB2015031606
SB2015090907


Showing elements 41 - 60 out of 384