Known vulnerabilities in F5OS

Vendor: F5 Networks
Software: F5OS
Software CPE: cpe:2.3:o:f5_networks:f5os:*:*:*:*:*:*:*:*
Website: https://f5.com/
Total vulnerabilities: 114
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting F5OS F5OS is affected by 114 known vulnerabilities: 6 high, 35 medium, 73 low Critical High Medium Low

Vulnerabilities (114)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122266 - Heap-based Buffer Overflow
CVE-2025-66862		 CWE-122 High
No
No
 - 03.02.2026 SB2026020362
SB2026020363
#VU115387 - Use After Free
CVE-2023-53178		 CWE-416 Low
No
No
 - 16.09.2025 SB20250916124
SB2025101633
SB2025101634
and 30 more
#VU114114 - Improper input validation
CVE-2025-24325		 CWE-20 Low
No
No
 - 15.08.2025 SB20250815113
SB2026031328
#VU112734 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-42516		 CWE-113 Low
No
No
 - 10.07.2025 SB2025071040
SB2025071710
SB2025071764
and 33 more
#VU108773 - Incorrect Authorization
CVE-2025-36546		 CWE-863 High
No
No
 1.5.3, 1.8.0 07.05.2025 SB2025050777
#VU108767 - Improper input validation
CVE-2025-43878		 CWE-20 Low
No
No
 1.8.0 07.05.2025 SB2025050756
#VU108766 - Improper Authorization
CVE-2025-46265		 CWE-285 Medium
No
No
 1.5.2, 1.8.0 07.05.2025 SB2025050756
#VU104011 - Out-of-bounds write
CVE-2024-36274		 CWE-787 Medium
No
No
 - 17.02.2025 SB2025021717
SB2025050757
SB2025051642
and 4 more
#VU97633 - Out-of-bounds read
CVE-2024-5642		 CWE-125 Low
No
No
 - 20.09.2024 SB2024092093
SB2024092095
SB2024092096
and 14 more
#VU96088 - Improper input validation
CVE-2024-24983		 CWE-20 Medium
No
No
 - 19.08.2024 SB2024081939
SB2024102543
SB20250520141
and 1 more
#VU93424 - Out-of-bounds read
CVE-2024-5535		 CWE-125 Low
Available
No
 - 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 154 more
#VU88152 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-24795		 CWE-113 Medium
No
No
 - 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 38 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-38709		 CWE-113 Medium
No
No
 - 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 62 more
#VU66522 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21233		 CWE-200 Low
No
No
 - 16.08.2022 SB2022081610
SB2022081724
SB2022081725
and 20 more
#VU64396 - Observable discrepancy
CVE-2022-23823		 CWE-203 Medium
No
No
 - 15.06.2022 SB2022061516
SB20250227198
SB20250227199
and 1 more
#VU64378 - Observable discrepancy
CVE-2022-24436		 CWE-203 Medium
No
No
 - 14.06.2022 SB2022061501
SB20250227202
SB20250227203
and 1 more
#VU61246 - Use After Free
CVE-2021-4083		 CWE-416 Low
No
No
 - 10.03.2022 SB2022031029
SB2022031033
SB2022031034
and 55 more
#VU48587 - Allocation of Resources Without Limits or Throttling
CVE-2020-8037		 CWE-770 Medium
No
No
 1.8.0 04.11.2020 SB2020110433
SB2020112103
SB2021042704
and 12 more
#VU31907 - Resource exhaustion
CVE-2019-14834		 CWE-400 Low
No
No
 - 07.01.2020 SB2019121131
SB2019121940
SB2020093042
and 7 more
#VU18058 - NULL Pointer Dereference
CVE-2019-9923		 CWE-476 Low
No
No
 - 22.03.2019 SB2019032204
SB2019041818
SB2021030306
and 10 more


Showing elements 1 - 20 out of 114