Known vulnerabilities in BIG-IP - page 3

Software: BIG-IP
Software CPE: cpe:2.3:h:f5_networks:big-ip:*:*:*:*:*:*:*:*
Total vulnerabilities: 380
Public exploits: 33
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting BIG-IP BIG-IP is affected by 380 known vulnerabilities: 2 critical, 19 high, 216 medium, 143 low Critical High Medium Low

Vulnerabilities (380)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112733 - Server-Side Request Forgery (SSRF)
CVE-2024-43204
CWE-918 Low
No
No
- 10.07.2025 -
#VU108778 - Out-of-bounds write
CVE-2025-41431
CWE-787 Medium
No
No
17.1.2.2 07.05.2025 SB2025050783
SB2025050784
#VU108775 - Resource exhaustion
CVE-2025-36504
CWE-400 Medium
No
No
16.1.6, 17.1.2, 20.3.0 07.05.2025 SB2025050780
#VU108772 - Improper Resource Shutdown or Release
CVE-2025-41399
CWE-404 Medium
No
No
15.1.9, 16.1.4, 17.1.1, 20.2.1 07.05.2025 SB2025050776
#VU108771 - NULL Pointer Dereference
CVE-2025-41433
CWE-476 Medium
No
No
16.1.5, 17.1.2 07.05.2025 SB2025050775
#VU108770 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-31644
CWE-78 Low
No
No
15.1.10.7, 16.1.6, 17.1.2.2 07.05.2025 SB2025050774
#VU108765 - Improper input validation
CVE-2025-41414
CWE-20 Medium
No
No
16.1.5, 17.1.2 07.05.2025 SB2025050755
#VU108764 - Improper input validation
CVE-2025-36557
CWE-20 Medium
No
No
16.1.5, 17.1.2 07.05.2025 SB2025050755
#VU104034 - Improper input validation
CVE-2025-26466
CWE-20 Medium
Available
No
- 18.02.2025 -
#VU103436 - Resource exhaustion
CVE-2024-11187
CWE-400 Medium
No
No
- 29.01.2025 -
#VU95157 - Incorrect Provision of Specified Functionality
CVE-2024-4032
CWE-684 Medium
No
No
- 02.08.2024 -
#VU87337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28757
CWE-611 Medium
No
No
17.1.2.2 11.03.2024 SB2024031135
SB2024031143
SB2024031144
and 72 more
#VU82299 - Heap-based Buffer Overflow
CVE-2023-45853
CWE-122 Medium
No
No
- 23.10.2023 -
#VU64378 - Observable discrepancy
CVE-2022-24436
CWE-203 Medium
No
No
- 14.06.2022 -
#VU61246 - Use After Free
CVE-2021-4083
CWE-416 Low
No
No
17.5.1 10.03.2022 SB2022031029
SB2022031033
SB2022031034
and 55 more
#VU53231 - Integer overflow
CVE-2021-32027
CWE-190 Medium
No
No
17.1.1 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 43 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022
CWE-79 Low
Available
No
- 21.04.2020 -
#VU25002 - Session Fixation
CVE-2019-17563
CWE-384 Low
No
No
- 06.02.2020 -
#VU6663 - Out-of-bounds read
CVE-2016-9840
CWE-125 Low
No
No
- 24.05.2017 -
#VU6664 - Out-of-bounds read
CVE-2016-9841
CWE-125 Low
No
No
- 24.05.2017 -


Showing elements 41 - 60 out of 380