BA
Product
Big-ip Advanced Firewall Manager
On CISA KEVExploited in the wildRansomware-linked
551
CVEs
11
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 35High 303Medium 162Low 0
Watch
Add Big-ip Advanced Firewall Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42920 | 7.5 | May 13 | BIG-IP DTLS Vulnerability Affected: 21.0.0; 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6 |
| CVE-2026-40629 | 7.5 | May 13 | BIG-IP SSL/TLS vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6 |
| CVE-2026-41218 | 7.5 | May 13 | BIG-IP PEM iRules vulnerability Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0 |
| CVE-2025-61990 | 7.5 | Oct 15 | TMM vulnerability Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 before 17.5.1.3 |
| CVE-2025-58071 | 7.5 | Oct 15 | BIG-IP IPSec vulnerability Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6; 17.1.0 before 17.1.3; 17.5.0 |
| CVE-2025-58096 | 7.5 | Oct 15 | BIG-IP TMM vulnerability Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1 |
| CVE-2025-61951 | 7.5 | Oct 15 | BIG-IP DTLS 1.2 Vulnerability Affected: 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 |
| CVE-2025-53856 | 7.5 | Oct 15 | TMM vulnerability Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1 |
| CVE-2025-59781 | 7.5 | Oct 15 | BIG-IP DNS cache vulnerability Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2 |
| CVE-2025-46706 | 7.5 | Oct 15 | BIG-IP iRules vulnerability Affected: 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2 |
| CVE-2025-48008 | 7.5 | Oct 15 | BIG-IP MPTCP vulnerability Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6 |
| CVE-2025-59478 | 7.5 | Oct 15 | BIG-IP AFM DoS protection profile vulnerability Affected: 15.1.0 before 15.1.10.8; 17.1.0 before 17.1.3; 17.5.0 |
| CVE-2025-53474 | 7.5 | Oct 15 | BIG-IP iRules vulnerability Affected: 15.1.0 before 15.1.1.0.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1 |
| CVE-2025-52585 | 7.5 | Aug 13 | BIG-IP Client SSL profile vulnerability Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2 |
| CVE-2025-41431 | 7.5 | May 7 | TMM Vulnerability Affected: 17.1.2 |
| CVE-2025-36504 | 7.5 | May 7 | BIG-IP HTTP/2 vulnerability Affected: 16.1.0 before 16.1.6; 17.1.0 before 17.1.2 |
| CVE-2025-41414 | 7.5 | May 7 | BIG-IP HTTP/2 vulnerability Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2 |
| CVE-2025-41433 | 7.5 | May 7 | BIG-IP SIP ALG profile vulnerability Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2 |
| CVE-2025-36557 | 7.5 | May 7 | BIG-IP HTTP vulnerability Affected: 16.1.0 before 16.1.5; 17.1.0 before 17.1.2 |
| CVE-2025-41399 | 7.5 | May 7 | SCTP Vulnerability Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0 |
| CVE-2025-24312 | 7.5 | Feb 5 | BIG-IP AFM vulnerability Affected: 15.1.0 before 15.1.10.6.0.11.6; 16.1.0 before 16.1.5.2.0.7.5; 17.1.0 before 17.1.2 |
| CVE-2025-22846 | 7.5 | Feb 5 | BIG-IP SIP Vulnerability Affected: 15.1.0 before 15.1.10.6.0.11.6-ENG; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2 |
| CVE-2025-20045 | 7.5 | Feb 5 | BIG-IP SIP MRF Vulnerability Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2 |
| CVE-2025-20058 | 7.5 | Feb 5 | BIG-IP message routing vulnerability Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2 |
| CVE-2025-21091 | 7.5 | Feb 5 | BIG-IP SNMP vulnerability Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2 |
| CVE-2025-21087 | 7.5 | Feb 5 | TMM Vulnerability Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2 |
| CVE-2024-41727 | 7.5 | Aug 14 | BIG-IP TMM vulnerability Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0 |
| CVE-2024-41164 | 7.5 | Aug 14 | BIG-IP MPTCP vulnerability Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0 |
| CVE-2024-39778 | 7.5 | Aug 14 | BIG-IP HSB vulnerability Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0 |
| CVE-2024-25560 | 7.5 | May 8 | TMM Vulnerability Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.4; 17.1.0 |
| CVE-2024-33608 | 7.5 | May 8 | BIG-IP IPsec vulnerability Affected: 17.1.0 |
| CVE-2024-21763 | 7.5 | Feb 14 | BIG-IP AFM vulnerability Affected: 17.1.0 before 17.1.1 |
| CVE-2024-24775 | 7.5 | Feb 14 | BIG-IP TMM vulnerability Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0 |
| CVE-2024-23314 | 7.5 | Feb 14 | BIG-IP HTTP/2 vulnerability Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0 |
| CVE-2024-23979 | 7.5 | Feb 14 | BIG-IP SSL Client Certificate LDAP and CRLDP Authentication profiles vulnerability Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0 |
| CVE-2024-21771 | 7.5 | Feb 14 | F5 AFM Signature Matching Vulnerability Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0 |
| CVE-2023-41085 | 7.5 | Oct 10 | BIG-IP IPSEC vulnerability Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4 |
| CVE-2023-40542 | 7.5 | Oct 10 | BIG-IP TCP Profile vulnerability Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4 |
| CVE-2023-40534 | 7.5 | Oct 10 | BIG-IP HTTP/2 vulnerability Affected: 16.1.0 before 16.1.4.1; 17.1.0 |
| CVE-2023-29163 | 7.5 | May 3 | BIG-IP UDP Profile vulnerability Affected: 14.1.0 before 14.1.5.4; 15.1.0 before 15.1.8.2; 16.1.0 before 16.1.3.4; 17.0.0 |
| CVE-2023-23555 | 7.5 | Feb 1 | BIG-IP Virtual Edition vulnerability Affected: 14.1.5 before 14.1.5.3; 15.1.0 before 15.1.8 |
| CVE-2023-22842 | 7.5 | Feb 1 | BIG-IP SIP profile vulnerability Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.3; 15.1.0 before 15.1.8.1; 16.1.0 before 16.1.3.3 |
| CVE-2023-22664 | 7.5 | Feb 1 | BIG-IP HTTP/2 profile vulnerability Affected: 16.1.0 before 16.1.3.3; 17.0.0 before 17.0.0.2 |
| CVE-2023-22422 | 7.5 | Feb 1 | HTTP profile vulnerability Affected: 16.1.0 before 16.1.3.3; 17.0.0 before 17.0.0.2 |
| CVE-2023-22340 | 7.5 | Feb 1 | BIG-IP SIP profile vulnerability Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.3; 15.1.0 before 15.1.8; 16.1.0 before 16.1.3.3; 17.0.0 before 17.0.0.2 |
| CVE-2023-22323 | 7.5 | Feb 1 | BIG-IP SSL OCSP Authentication profile vulnerability Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.3; 15.1.0 before 15.1.8.1; 16.1.0 before 16.1.3.3; 17.0.0 before 17.0.0.2 |
| CVE-2023-22281 | 7.5 | Feb 1 | BIG-IP AFM vulnerability Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.3; 15.1.0 before 15.1.8; 16.1.0 before 16.1.3.3; 17.0.0 before 17.0.0.2 |
| CVE-2022-41833 | 7.5 | Oct 19 | BIG-IP iRule vulnerability CVE-2022-41833 Affected: 13.1.0 through 13.1.5 |
| CVE-2022-41832 | 7.5 | Oct 19 | BIG-IP SIP vulnerability CVE-2022-41832 Affected: 13.1.0 before 13.1.5.1; 14.1.0 before 14.1.5.1; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.3.1; 17.0.0 before 17.0.0.1 |
| CVE-2022-41806 | 7.5 | Oct 19 | BIG-IP AFM NAT64 Policy Vulnerability CVE-2022-41806 Affected: 15.1.0 before 15.1.5.1; 16.1.0 before 16.1.3.2 |
The 500 most important CVEs for this product (exploited first, then by severity)