Known vulnerabilities in BIG-IP AFM
Vendor:
F5 Networks
Software:
BIG-IP AFM
Software CPE:
cpe:2.3:h:f5_networks:big-ip_afm:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
160
Public exploits:
13
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
12.1.3.3
13.1.3.3
13.1.3.1
13.1.1.4
13.1.1.3
13.1.0.7
13.1.0.5
13.1.0.4
14.1.2.2
17.5.1.4
17.5.1.4.0.17.20
15.1.10.6.0.11.6
16.1.5.2.0.7.5
17.1.2
17.1.1.4
17.1.1.3
17.1.1.2
17.1.1.1
17.1.0.3
17.1.0.2
17.1.0.1
16.1.5
16.1.4.3
16.1.4.2
16.1.4.1
16.1.3.5
16.1.3.4
15.1.10
15.1.9.1
15.1.9
15.1.8.2
15.1.8.1
15.1.7
15.1.6.1
15.1.6
15.1.0.3
16.1.4
17.1.1
17.0.0.1
16.1.3.2
16.1.3.1
16.1.3
14.1.5.2
14.1.5.1
14.1.5
14.1.5.3
15.1.8
16.1.3.3
17.0.0.2
16.1.2.1
17.0.0
13.1.5
14.1.4.6
15.1.5.1
16.1.2.2
15.1.4
14.1.4.4
16.1.1
15.1.4.1
16.1.2
14.1.4.1
14.1.4.5
15.1.5
12.1.6
13.1.4
14.1.4.2
16.1.0
13.1.4.1
14.1.4.3
15.1.3.1
16.0.1.2
15.1.3
11.6.5.3
12.1.5.3
14.1.4
13.1.3.6
15.1.2.1
16.0.1.1
14.1.3.1
14.1.2.8
13.1.3.5
14.1.3
16.0.1
15.1.2
15.1.1
13.0.0 HF3
12.1.2 HF2
11.6.2 HF1
15.1.0.5
14.1.2.7
16.0.0
14.1.2-0.89.37
14.1.2.5
15.0.1.4
15.1.0.4
14.1.2.6
13.1.3.4
12.1.5.2
11.6.5.2
15.0.1.3
14.1.2.4
15.0.1.2
15.1.0.2
15.1.0.1
14.1.2.3
15.1.0
12.1.5.1
15.0.1.1
14.1.0.6
14.0.0.5
11.6.5.1
11.5.7
11.5.8
11.5.9
11.5.10
11.6.5
15.0.1
15.0.0
12.1.5
12.1.4
13.1.3.2
14.1.2.1.0.122.4-ENG Hotfix
14.1.2.1.0.115.4-ENG Hotfix
14.1.2.1.0.111.4-ENG Hotfix
14.1.2.1.0.105.4-ENG Hotfix
14.1.2.1.0.99.4-ENG Hotfix
14.1.2.1.0.97.4-ENG Hotfix
14.1.2.1.0.34.4-ENG Hotfix
14.1.2.1.0.16.4-ENG Hotfix
14.1.2.1.0.14.4-ENG Hotfix
14.1.2.1.0.46.4-ENG Hotfix
14.1.2.0.32.37-ENG Hotfix
14.1.2.0.18.37-ENG Hotfix
14.1.2.0.11.37-ENG Hotfix
14.1.0.6.0.70.9-ENG Hotfix
14.1.0.6.0.68.9-ENG Hotfix
14.1.0.6.0.14.9-ENG Hotfix
14.1.0.6.0.11.9-ENG Hotfix
14.1.0.5.0.40.5-ENG Hotfix
14.1.0.5.0.36.5-ENG Hotfix
14.1.0.5.0.15.5-ENG Hotfix
14.1.0.3.0.99.6-ENG Hotfix
14.1.0.3.0.97.6-ENG Hotfix
14.1.0.3.0.79.6-ENG Hotfix
15.0.1.0.48.11-ENG Hotfix
15.0.1.0.33.11-ENG Hotfix
13.1.1.5
14.0.1
14.1.2
14.1.1
14.1.0
14.0.1.1
14.1.2.1
13.1.3
11.6.4
13.1.1.1
12.1.3.6
12.1.3.5
14.0.0
13.1.1.2
12.1.3.7
13.1.1
13.1.0.8
12.1.3.2
12.1.3.4
13.1.0.6
12.1.3.1
13.0.1
11.5.6
11.5.5
11.5.4 HF4
13.1.0.3
13.1.0.2
13.1.0.1
13.1.0
13.0.0 HF1
12.1.3
11.6.3
11.5.3
11.5.2
11.5.1
11.5.0
11.6.2
11.2.1
11.5.1 HF6
11.6.0
12.0.1
12.1.2 HF1
11.4.0
11.5.4
13.0.0
12.1.0 HF1
12.0.0 HF4
12.0.0 HF3
12.0.0 HF1
12.1.2
12.0.0
11.6.1 HF1
12.1.1
12.1.0
11.6.1
Vulnerabilities (160)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU123088 - Improper input validation CVE-2026-2507 |
CWE-20 | Medium | 17.5.1.4.0.17.20 | 19.02.2026 |
SB2026021954 |
||
| #VU103722 - Resource exhaustion CVE-2025-24312 |
CWE-400 | Medium | 15.1.10.6.0.11.6, 16.1.5.2.0.7.5, 17.1.2 | 07.02.2025 |
SB2025020739 |
||
| #VU89328 - NULL Pointer Dereference CVE-2024-25560 |
CWE-476 | Medium | 16.1.4, 17.1.1 | 10.05.2024 |
SB2024051012 |
||
| #VU75741 - Improper input validation CVE-2023-1667 |
CWE-20 | Medium | - | 04.05.2023 |
SB2023050456 SB2023050501 SB2023052441 and 75 more |
||
| #VU71784 - Improper input validation CVE-2023-22281 |
CWE-20 | Medium | 14.1.5.3, 15.1.8, 16.1.3.3, 17.0.0.2 | 03.02.2023 |
SB2023020309 |
||
| #VU59890 - Resource exhaustion CVE-2022-23024 |
CWE-400 | Medium | 14.1.4.2, 15.1.4.1, 16.1.0 | 20.01.2022 |
SB2022012026 |
||
| #VU59881 - Improper Handling of Exceptional Conditions CVE-2022-23018 |
CWE-755 | Medium | 14.1.4.5, 15.1.4.1, 16.1.2 | 20.01.2022 |
SB2022012017 |
||
| #VU59837 - Incorrect Calculation CVE-2022-23028 |
CWE-682 | Medium | 14.1.4.5, 15.1.5 | 19.01.2022 |
SB2022011929 |
||
| #VU56089 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2021-23040 |
CWE-89 | Medium | 13.1.4.1, 14.1.4.2, 15.1.3, 16.0.1.2, 16.1.0 | 25.08.2021 |
SB2021082513 |
||
| #VU56088 - Improper input validation CVE-2021-23045 |
CWE-20 | Low | 13.1.4.1, 14.1.4.3, 15.1.3.1, 16.0.1.2, 16.1.0 | 25.08.2021 |
SB2021082512 |
||
| #VU52749 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-23009 |
CWE-835 | Medium | 15.1.3, 16.0.1.1 | 29.04.2021 |
SB2021042917 |
||
| #VU51494 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2021-22988 |
CWE-78 | High | 11.6.5.3, 12.1.5.3, 13.1.3.6, 14.1.4, 15.1.2.1, 16.0.1.1 | 16.03.2021 |
SB2021031607 |
||
| #VU51493 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2021-22987 |
CWE-78 | High | 11.6.5.3, 12.1.5.3, 13.1.3.6, 14.1.4, 15.1.2.1, 16.0.1.1 | 16.03.2021 |
SB2021031606 |
||
| #VU51491 - Resource Management Errors CVE-2021-23003 |
CWE-399 | Medium | 11.6.5.3, 12.1.5.3, 13.1.3.6, 14.1.3.1, 15.1.2, 16.0.1.1 | 16.03.2021 |
SB2021031604 |
||
| #VU51490 - Resource Management Errors CVE-2021-23000 |
CWE-399 | Medium | 12.1.5.3 | 16.03.2021 |
SB2021031603 |
||
| #VU50075 - Reachable Assertion CVE-2021-3326 |
CWE-617 | Medium | - | 27.01.2021 |
SB2021012804 SB2021020710 SB2021020711 and 34 more |
||
| #VU50329 - Out-of-bounds read CVE-2019-25013 |
CWE-125 | Low | - | 04.01.2021 |
SB2021020413 SB2021020414 SB2021020710 and 36 more |
||
| #VU47106 - Out-of-bounds read CVE-2020-14314 |
CWE-125 | Low | - | 15.09.2020 |
SB2020092605 SB2020090877 SB2021031201 and 14 more |
||
| #VU18027 - Out-of-bounds read CVE-2019-3859 |
CWE-125 | Medium | - | 20.03.2019 |
SB2019031904 SB2019041501 SB2019032002 and 15 more |
||
| #VU18026 - Out-of-bounds read CVE-2019-3860 |
CWE-125 | Medium | - | 20.03.2019 |
SB2019031904 SB2019041501 SB2019032002 and 13 more |
Showing elements 1 - 20 out of 160