Known vulnerabilities in BIG-IP - page 6

Software: BIG-IP
Software CPE: cpe:2.3:h:f5_networks:big-ip:*:*:*:*:*:*:*:*
Total vulnerabilities: 380
Public exploits: 33
Known exploited (KEV): 9
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting BIG-IP BIG-IP is affected by 380 known vulnerabilities: 2 critical, 19 high, 216 medium, 143 low Critical High Medium Low

Vulnerabilities (380)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98758 - Missing Authentication for Critical Function
CVE-2024-45844
CWE-306 Low
Available
No
15.1.10.5, 16.1.5, 17.1.1.4 16.10.2024 SB20241016109
#VU94063 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2024-3596
CWE-327 Medium
Available
No
- 10.07.2024 -
#VU93545 - Server-Side Request Forgery (SSRF)
CVE-2024-39573
CWE-918 Medium
No
No
- 01.07.2024 -
#VU93542 - Improper input validation
CVE-2024-38475
CWE-20 Critical
Available
No
- 01.07.2024 -
#VU93541 - Improper input validation
CVE-2024-38474
CWE-20 Medium
No
No
- 01.07.2024 -
#VU93540 - Improper input validation
CVE-2024-38473
CWE-20 Medium
Available
No
- 01.07.2024 -
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891
CWE-200 Low
No
No
- 19.06.2024 -
#VU87374 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-2193
CWE-362 Low
No
No
20.2.0 12.03.2024 SB20240312315
SB2024031401
SB2024031501
and 13 more
#VU87182 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-25869
CWE-79 Medium
No
No
- 07.03.2024 -
#VU86378 - Resource exhaustion
CVE-2023-50868
CWE-400 Medium
Available
No
- 13.02.2024 -
#VU86377 - Resource exhaustion
CVE-2023-50387
CWE-400 Medium
Available
No
16.1.5, 17.1.1.1 13.02.2024 SB2024021325
SB2024021330
SB2024021329
and 145 more
#VU86052 - Use After Free
CVE-2024-25062
CWE-416 High
No
No
- 05.02.2024 -
#VU81703 - Inefficient Regular Expression Complexity
CVE-2023-26116
CWE-1333 Medium
No
No
- 09.10.2023 -
#VU81699 - Inefficient Regular Expression Complexity
CVE-2023-26118
CWE-1333 Medium
No
No
- 09.10.2023 -
#VU79318 - Inefficient Regular Expression Complexity
CVE-2023-26117
CWE-1333 Medium
No
No
- 10.08.2023 -
#VU66396 - Use After Free
CVE-2022-2586
CWE-416 Low
Available
Exploited
- 11.08.2022 -
#VU61393 - UNIX Symbolic Link (Symlink) Following
CVE-2021-23177
CWE-61 Low
No
No
- 15.03.2022 -
#VU23383 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14863
CWE-79 Medium
No
No
- 04.12.2019 -
#VU23382 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10768
CWE-79 Medium
No
No
- 04.12.2019 -
#VU11835 - Heap-based Buffer Overflow
CVE-2018-6913
CWE-122 Low
No
No
- 16.04.2018 -


Showing elements 101 - 120 out of 380