Login Request a demo
BS
Product
Big-ip Ssl Orchestrator
by F5 · last CVE Sep 2, 2026
On CISA KEVExploited in the wildRansomware-linked
147
CVEs
3
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities147In the news0Timeline
Severity mix
Critical 3High 89Medium 53Low 2
Severity
All severities147Critical3High89Medium53Low2
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add Big-ip Ssl Orchestrator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-46748
In wildKEV
8.8
4%
Oct 26
BIG-IP Configuration utility authenticated SQL injection vulnerability
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 through 15.1.10; 16.1.0 through 16.1.4; 17.1.0 through 17.1.1
CVE-2023-44487
In wildKEV
7.5
100%
Oct 10
HTTP/2 Rapid Reset Attack Vulnerability
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 through 15.1.10; 16.1.0 through 16.1.4; 17.1.0
CVE-2026-41957
8.8
1%
May 13
BIG-IP and BIG-IQ Configuration utility vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6
CVE-2025-20029
8.8
7%
Feb 5
BIG-IP iControl REST and tmsh vulnerability
Affected: 15.1.0 before 15.1.10.6; 16.1.0 before 16.1.5.2; 17.1.0 before 17.1.2.1
CVE-2021-23026
8.8
0%
Sep 14
BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x and all versions of BIG-IQ 8.x,…
Affected: 13.1.0 through 13.1.4; 14.1.0 through 14.1.4; 15.1.0 through 15.1.2; 16.0.0 through 16.0.1.1
CVE-2021-23025
8.8
2%
Sep 14
On version 15.1.x before 15.1.0.5, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all versions of 12.1.x and 11.6.x, an authenticated remote command execution vulnerability…
Affected: 11.6.1 through 11.6.5; 12.1.0 through 12.1.6; 13.1.0 before 13.1.3.5; 14.1.0 before 14.1.3.1; 15.0.0 before 15.1.0.5
CVE-2026-42930
8.7
0%
May 13
Appliance mode iControl REST vulnerability
Affected: 21.0.0; 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6
CVE-2026-42406
8.7
0%
May 13
BIG-IP and BIG-IQ privilege escalation vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-32643
8.7
0%
May 13
BIG-IP and BIG-IQ privilege escalation vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-32673
8.7
0%
May 13
BIG-IP scripted monitor vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-34176
8.7
1%
May 13
Knowledge Appliance mode iControl REST vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-41953
8.7
0%
May 13
BIG-IP Privilege Escalation vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-40631
8.7
0%
May 13
BIG-IP iControl SOAP vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-40698
8.7
0%
May 13
iControl REST and TMSH vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-42924
8.7
0%
May 13
BIG-IP iControl SOAP vulnerability
Affected: 21.0.0; 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6
CVE-2025-59481
8.7
0%
Oct 15
BIG-IP iControl REST and tmsh vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1
CVE-2025-61958
8.7
0%
Oct 15
BIG-IP TMSH vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 before 17.5.1.1
CVE-2025-53868
8.7
0%
Oct 15
BIG-IP SCP and SFTP vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1
CVE-2025-31644
8.7
24%
May 7
Appliance mode BIG-IP iControl REST and tmsh vulnerability
Affected: 15.1.0 before 15.1.10.7; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
CVE-2023-43746
8.7
1%
Oct 10
BIG-IP Appliance mode external monitor vulnerability
Affected: 13.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4
CVE-2023-22374
8.5
73%
Feb 1
A format string vulnerability exists in iControl SOAP that allows an authenticated attacker to crash the iControl SOAP CGI process or, potentially execute arbitrary code
Affected: 14.1.4.6 through 14.1.5; 15.1.5.1 through 15.1.8; 16.1.2.2 through 16.1.3; 13.1.5; 17.0.0
CVE-2021-22978
8.3
1%
Feb 12
On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12.1.x and 11.6.x versions, undisclosed endpoints in iControl…
Affected: 11.6.1 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 before 13.1.3.5; 14.1.0 before 14.1.3.1; 15.1.0 before 15.1.1; 16.0.0 before 16.0.1
CVE-2021-23012
8.2
0%
May 10
On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, and 13.1.x before 13.1.4, lack of input validation for items used in the system support…
Affected: 13.1.0 before 13.1.4; 14.1.0 before 14.1.4; 15.1.0 before 15.1.3; 16.0.0 before 16.0.1.1
CVE-2023-40537
8.1
1%
Oct 10
Multi-blade VIPRION Configuration utility session cookie vulnerability
Affected: 13.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4
CVE-2025-24320
8.0
0%
Feb 5
BIG-IP Configuration utility vulnerability
Affected: 15.1.0 before 15.1.10.6; 16.1.0 before 16.1.5.2; 17.1.0 before 17.1.2
CVE-2024-31156
8.0
1%
May 8
BIG-IP Configuration utility XSS vulnerability
Affected: 15.1.0 before 15.1.10.4; 16.1.0 before 16.1.4.3; 17.1.0 before 17.1.1.3
CVE-2026-41217
7.9
0%
May 13
BIG-IP tmsh vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2023-43611
7.8
0%
Oct 10
BIG-IP Edge Client for macOS vulnerability
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4
CVE-2026-40423
7.5
0%
May 13
BIG-IP SIP profile vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-39458
7.5
0%
May 13
BIG-IP DNS Cache vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-39455
7.5
0%
May 13
BIG-IP Configuration utility vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-42409
7.5
0%
May 13
BIG-IP HTTP/2 vulnerability
Affected: 21.0.0; 16.1.0 through 16.1.6; 17.1.0 through 17.1.3; 17.5.0 through 17.5.1
CVE-2026-40618
7.5
0%
May 13
BIG-IP SSL/TLS vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2026-41956
7.5
0%
May 13
BIG-IP TMM Vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6
CVE-2026-42920
7.5
0%
May 13
BIG-IP DTLS Vulnerability
Affected: 21.0.0; 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6
CVE-2026-40629
7.5
0%
May 13
BIG-IP SSL/TLS vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6
CVE-2026-41218
7.5
0%
May 13
BIG-IP PEM iRules vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2025-61990
7.5
0%
Oct 15
TMM vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 before 17.5.1.3
CVE-2025-58071
7.5
0%
Oct 15
BIG-IP IPSec vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0
CVE-2025-58096
7.5
0%
Oct 15
BIG-IP TMM vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1
CVE-2025-61951
7.5
0%
Oct 15
BIG-IP DTLS 1.2 Vulnerability
Affected: 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0
CVE-2025-53856
7.5
0%
Oct 15
TMM vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1
CVE-2025-41430
7.5
0%
Oct 15
BIG-IP SSL Orchestrator vulnerability
Affected: 15.1.0 through 15.1.9; 16.1.0 before 16.1.4; 17.1.0 before 17.1.3; 17.5.0
CVE-2025-55036
7.5
0%
Oct 15
BIG-IP SSL Orchestrator vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6; 17.1.0 before 17.1.3
CVE-2025-59781
7.5
0%
Oct 15
BIG-IP DNS cache vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
CVE-2025-46706
7.5
0%
Oct 15
BIG-IP iRules vulnerability
Affected: 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
CVE-2025-48008
7.5
0%
Oct 15
BIG-IP MPTCP vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6
CVE-2025-53474
7.5
0%
Oct 15
BIG-IP iRules vulnerability
Affected: 15.1.0 before 15.1.1.0.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1
CVE-2025-52585
7.5
0%
Aug 13
BIG-IP Client SSL profile vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
CVE-2025-36504
7.5
0%
May 7
BIG-IP HTTP/2 vulnerability
Affected: 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
Page 1 of 2 · 89 total
12