Login Request a demo
BD
Product
Big-ip Ddos Hybrid Defender
by F5 · last CVE Sep 2, 2026
On CISA KEVExploited in the wildRansomware-linked
166
CVEs
6
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities166In the news0Timeline
Severity mix
Critical 9High 96Medium 59Low 2
Severity
All severities166Critical9High96Medium59Low2
Exploitation
On CISA KEV6Exploited in the wild6
Watch

Add Big-ip Ddos Hybrid Defender to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-58071
7.5
0%
Oct 15
BIG-IP IPSec vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0
CVE-2025-58096
7.5
0%
Oct 15
BIG-IP TMM vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1
CVE-2025-61951
7.5
0%
Oct 15
BIG-IP DTLS 1.2 Vulnerability
Affected: 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0
CVE-2025-53856
7.5
0%
Oct 15
TMM vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1
CVE-2025-59781
7.5
0%
Oct 15
BIG-IP DNS cache vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
CVE-2025-46706
7.5
0%
Oct 15
BIG-IP iRules vulnerability
Affected: 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
CVE-2025-48008
7.5
0%
Oct 15
BIG-IP MPTCP vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6
CVE-2025-53474
7.5
0%
Oct 15
BIG-IP iRules vulnerability
Affected: 15.1.0 before 15.1.1.0.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1
CVE-2025-52585
7.5
0%
Aug 13
BIG-IP Client SSL profile vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
CVE-2025-36504
7.5
0%
May 7
BIG-IP HTTP/2 vulnerability
Affected: 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
CVE-2025-41414
7.5
0%
May 7
BIG-IP HTTP/2 vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2
CVE-2025-41433
7.5
0%
May 7
BIG-IP SIP ALG profile vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2
CVE-2025-41399
7.5
0%
May 7
SCTP Vulnerability
Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0
CVE-2025-20045
7.5
0%
Feb 5
BIG-IP SIP MRF Vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2
CVE-2025-20058
7.5
0%
Feb 5
BIG-IP message routing vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
CVE-2025-21091
7.5
0%
Feb 5
BIG-IP SNMP vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
CVE-2025-21087
7.5
0%
Feb 5
TMM Vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
CVE-2024-41727
7.5
0%
Aug 14
BIG-IP TMM vulnerability
Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0
CVE-2024-41164
7.5
0%
Aug 14
BIG-IP MPTCP vulnerability
Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0
CVE-2024-39778
7.5
0%
Aug 14
BIG-IP HSB vulnerability
Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0
CVE-2024-25560
7.5
1%
May 8
TMM Vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.4; 17.1.0
CVE-2024-33608
7.5
1%
May 8
BIG-IP IPsec vulnerability
Affected: 17.1.0
CVE-2023-41085
7.5
1%
Oct 10
BIG-IP IPSEC vulnerability
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4
CVE-2023-40542
7.5
1%
Oct 10
BIG-IP TCP Profile vulnerability
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4
CVE-2023-40534
7.5
1%
Oct 10
BIG-IP HTTP/2 vulnerability
Affected: 16.1.0 before 16.1.4.1; 17.1.0
CVE-2023-29163
7.5
1%
May 3
BIG-IP UDP Profile vulnerability
Affected: 14.1.0 before 14.1.5.4; 15.1.0 before 15.1.8.2; 16.1.0 before 16.1.3.4; 17.0.0
CVE-2023-23555
7.5
1%
Feb 1
BIG-IP Virtual Edition vulnerability
Affected: 14.1.5 before 14.1.5.3; 15.1.4 before 15.1.8
CVE-2023-22842
7.5
1%
Feb 1
BIG-IP SIP profile vulnerability
Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.3; 15.1.0 before 15.1.8.1; 16.1.0 before 16.1.3.3
CVE-2023-22664
7.5
1%
Feb 1
BIG-IP HTTP/2 profile vulnerability
Affected: 16.1.0 before 16.1.3.3; 17.0.0 before 17.0.0.2
CVE-2023-22422
7.5
1%
Feb 1
HTTP profile vulnerability
Affected: 16.1.0 before 16.1.3.3; 17.0.0 before 17.0.0.2
CVE-2023-22340
7.5
1%
Feb 1
BIG-IP SIP profile vulnerability
Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.3; 15.1.0 before 15.1.8; 16.1.0 before 16.1.3.3
CVE-2023-22323
7.5
1%
Feb 1
BIG-IP SSL OCSP Authentication profile vulnerability
Affected: 13.1.0 through 13.1.5; 14.1.0 before 14.1.5.3; 15.1.0 before 15.1.8.1; 16.1.0 before 16.1.3.3
CVE-2022-23025
7.5
1%
Jan 25
On BIG-IP version 16.1.x before 16.1.1, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, when a SIP ALG profile is configured on a virtual server,…
Affected: 13.1.0 through 13.1.4; 14.1.0 through 14.1.4; 15.1.0 through 15.1.3; 16.1.0 through 16.1.1
CVE-2002-20001
7.5
25%
Nov 11
The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive…
Affected: 13.1.0 through 17.1.2; 17.5.0
CVE-2021-23045
7.5
1%
Sep 14
On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x, when an SCTP profile with multiple…
Affected: 12.1.0 through 12.1.6; 13.1.0 before 13.1.4.1; 14.1.0 before 14.1.4.3; 15.1.0 before 15.1.3.1; 16.0.0 before 16.0.1.2
CVE-2021-23042
7.5
1%
Sep 14
On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, and 12.1.x before 12.1.6, when an HTTP profile is configured on a…
Affected: 12.1.0 before 12.1.6; 13.1.0 before 13.1.4; 14.1.0 before 14.1.4; 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.2
CVE-2021-23009
7.5
1%
May 10
On BIG-IP version 16.0.x before 16.0.1.1 and 15.1.x before 15.1.3, malformed HTTP/2 requests may cause an infinite loop which causes a Denial of Service for Data Plane traffic
Affected: 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.1
CVE-2021-23013
7.5
1%
May 10
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, the Traffic Management Microkernel (TMM)…
Affected: 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.4; 14.1.0 before 14.1.4; 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.1
CVE-2021-23011
7.5
1%
May 10
On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, when the BIG-IP system is…
Affected: 11.6.1 before 11.6.5.3; 12.1.0 before 12.1.6; 13.1.0 before 13.1.4; 14.1.0 before 14.1.4; 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.1
CVE-2021-23004
7.5
1%
Mar 31
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, Multipath TCP…
Affected: 11.6.1 before 11.6.5.3; 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.4; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1
CVE-2021-22999
7.5
1%
Mar 31
On versions 15.0.x before 15.1.0 and 14.1.x before 14.1.4, the BIG-IP system provides an option to connect HTTP/2 clients to HTTP/1.x servers
Affected: 14.1.0 before 14.1.4; 15.0.0 before 15.1.0
CVE-2021-23003
7.5
1%
Mar 31
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, the Traffic…
Affected: 11.6.1 before 11.6.5.3; 12.1.0 before 12.1.5.3; 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.4; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1
CVE-2021-23000
7.5
1%
Mar 31
On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2, if the tmm.http.rfc.enforcement BigDB key is enabled in a BIG-IP system, or the Bad host header value is checked in the AFM HTTP…
Affected: 13.1.3.4 before 13.1.3.6; 12.1.5.2
CVE-2021-22977
7.5
1%
Feb 12
On BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3, cooperation between malicious HTTP client code and a malicious server may cause TMM to restart and generate a core file
Affected: 14.1.0 before 14.1.3.1; 16.0.0 before 16.0.1.1
CVE-2021-22974
7.5
1%
Feb 12
On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6 and all versions of BIG-IQ 7.x and 6.x, an authenticated…
Affected: 13.1.0 before 13.1.3.6; 14.1.0 before 14.1.3.1; 15.1.0 before 15.1.2; 16.0.0 before 16.0.1.1
CVE-2021-22975
7.5
1%
Feb 12
On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, and 14.1.x before 14.1.3.1, under some circumstances, Traffic Management Microkernel (TMM) may restart on the…
Affected: 14.1.0 before 14.1.3.1; 15.1.0 before 15.1.2.1; 16.0.0 before 16.0.1.1
CVE-2020-5949
7.5
1%
Dec 11
On BIG-IP versions 14.0.0-14.0.1 and 13.1.0-13.1.3.4, certain traffic pattern sent to a virtual server configured with an FTP profile can cause the FTP channel to break
Affected: 13.1.0 before 13.1.3.5; 14.0.0 before 14.1.0
CVE-2020-5939
7.5
1%
Nov 5
In versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.3, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, and 13.1.0-13.1.3.4, BIG-IP Virtual Edition (VE) systems on VMware, with an Intel-based 85299…
Affected: 13.1.0 through 13.1.3; 14.1.0 before 14.1.2.7; 15.1.0 before 15.1.0.4; 16.0.0 before 16.0.1
CVE-2020-5913
7.4
0%
Aug 26
In versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, the BIG-IP Client or Server SSL profile ignores revoked certificates, even…
Affected: 11.6.1 before 11.6.5; 12.1.0 before 12.1.5.2; 13.1.0 before 13.1.3; 14.1.0 before 14.1.2-0.89.37; 14.1.2.1 before 14.1.2.5; 15.0.0 before 15.0.1.2
CVE-2026-39459
7.2
0%
May 13
iControl REST and tmsh vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
Page 2 of 4 · 166 total
1234