Login Request a demo
BW
Product
Big-ip Webaccelerator
by F5 · last CVE Sep 2, 2026
On CISA KEVExploited in the wildRansomware-linked
295
CVEs
5
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities295In the news1Timeline
Severity mix
Critical 12High 149Medium 113Low 3
Severity
All severities295Critical12High149Medium113Low3
Exploitation
On CISA KEV5Exploited in the wild5
Watch

Add Big-ip Webaccelerator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-59781
7.5
0%
Oct 15
BIG-IP DNS cache vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
CVE-2025-46706
7.5
0%
Oct 15
BIG-IP iRules vulnerability
Affected: 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
CVE-2025-48008
7.5
0%
Oct 15
BIG-IP MPTCP vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6
CVE-2025-53474
7.5
0%
Oct 15
BIG-IP iRules vulnerability
Affected: 15.1.0 before 15.1.1.0.8; 16.1.0 before 16.1.6.1; 17.1.0 before 17.1.3; 17.5.0 through 17.5.1
CVE-2025-52585
7.5
0%
Aug 13
BIG-IP Client SSL profile vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2.2
CVE-2025-36504
7.5
0%
May 7
BIG-IP HTTP/2 vulnerability
Affected: 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
CVE-2025-41414
7.5
0%
May 7
BIG-IP HTTP/2 vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2
CVE-2025-41433
7.5
0%
May 7
BIG-IP SIP ALG profile vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2
CVE-2025-41399
7.5
0%
May 7
SCTP Vulnerability
Affected: 15.1.0 before 15.1.9; 16.1.0 before 16.1.4; 17.1.0
CVE-2025-20045
7.5
0%
Feb 5
BIG-IP SIP MRF Vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2
CVE-2025-20058
7.5
0%
Feb 5
BIG-IP message routing vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
CVE-2025-21091
7.5
0%
Feb 5
BIG-IP SNMP vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
CVE-2025-21087
7.5
0%
Feb 5
TMM Vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
CVE-2024-41727
7.5
0%
Aug 14
BIG-IP TMM vulnerability
Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0
CVE-2024-41164
7.5
0%
Aug 14
BIG-IP MPTCP vulnerability
Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0
CVE-2024-39778
7.5
0%
Aug 14
BIG-IP HSB vulnerability
Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0
CVE-2024-25560
7.5
1%
May 8
TMM Vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.4; 17.1.0
CVE-2024-33608
7.5
1%
May 8
BIG-IP IPsec vulnerability
Affected: 17.1.0
CVE-2023-41085
7.5
1%
Oct 10
When IPSec is configured on a Virtual Server, undisclosed traffic can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not…
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4
CVE-2023-40542
7.5
1%
Oct 10
When TCP Verified Accept is enabled on a TCP profile that is configured on a Virtual Server, undisclosed requests can cause an increase in memory resource utilization.  Note:…
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4
CVE-2023-40534
7.5
1%
Oct 10
When a client-side HTTP/2 profile and the HTTP MRF Router option are enabled for a virtual server, and an iRule using the HTTP_REQUEST event or Local Traffic Policy are associated…
Affected: 16.1.0 before 16.1.4.1; 17.1.0
CVE-2023-29163
7.5
1%
May 3
When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate.  Note: Software versions…
Affected: 14.1.0 before 14.1.5.4; 15.1.0 before 15.1.8.2; 16.1.0 before 16.1.3.4; 17.0.0
CVE-2002-20001
7.5
25%
Nov 11
The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive…
Affected: 13.1.0 through 17.1.2; 17.5.0
CVE-2020-5930
7.5
1%
Sep 25
In BIG-IP 15.0.0-15.1.0.4, 14.1.0-14.1.2.7, 13.1.0-13.1.3.3, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2 and BIG-IQ 5.2.0-7.1.0, unauthenticated attackers can cause disruption of service…
Affected: 11.6.1 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 before 13.1.3.4; 14.1.0 before 14.1.2.8; 15.1.0 before 15.1.0.5
CVE-2020-5883
7.5
1%
Apr 30
On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, when a virtual server is configured with HTTP explicit proxy and has an attached HTTP_PROXY_REQUEST…
Affected: 13.1.0 through 13.1.3.1; 14.0.0 through 14.0.1; 14.1.0 through 14.1.2.3; 15.0.0 through 15.0.1.3
CVE-2020-5882
7.5
1%
Apr 30
On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5, and 11.6.1-11.6.5.1, under certain conditions, the Intel QuickAssist Technology (QAT) cryptography…
Affected: 11.6.1 through 11.6.5.1; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3.3; 14.1.0 through 14.1.2.3; 15.0.0 through 15.0.1.3
CVE-2020-5857
7.5
1%
Mar 27
On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, undisclosed HTTP behavior may lead to a denial of service
Affected: 11.5.2 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3; 14.1.0 through 14.1.2; 15.0.0 through 15.0.1
CVE-2020-5852
7.5
1%
Jan 14
Undisclosed traffic patterns received may cause a disruption of service to the Traffic Management Microkernel (TMM)
Affected: 11.5.4.2.74.291; 12.1.4.1.0.97.6; 14.1.2.1.0.83.4
CVE-2019-6683
7.5
1%
Dec 23
On versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, BIG-IP virtual servers with Loose Initiation enabled on a FastL4…
Affected: 11.5.2 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.2.3; 15.0.0 before 15.1.0
CVE-2019-6676
7.5
1%
Dec 23
On versions 15.0.0-15.0.1, 14.0.0-14.1.2.2, and 13.1.0-13.1.3.1, TMM may restart on BIG-IP Virtual Edition (VE) when using virtio direct descriptors and packets 2 KB or larger
Affected: 13.1.0 before 13.1.3.2; 14.0.0 before 14.1.2.3; 15.0.0 before 15.0.1.1
CVE-2019-6671
7.5
1%
Nov 27
On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, under certain conditions tmm may leak memory when processing packet fragments, leading to resource…
Affected: 13.1.0 through 13.1.3.1; 14.0.0 through 14.0.1; 14.1.0 through 14.1.2; 15.0.0 through 15.0.1
CVE-2019-6669
7.5
1%
Nov 27
On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.1-11.6.5.1, undisclosed traffic flow may cause TMM to restart under some…
Affected: 11.5.1 through 11.6.5.1; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3.1; 14.0.0 through 14.0.1; 14.1.0 through 14.1.2; 15.0.0 through 15.0.1
CVE-2019-6667
7.5
1%
Nov 27
On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.1.0-13.1.1.5, 12.1.0-12.1.4.1, and 11.5.1-11.6.5, under certain conditions, TMM may consume excessive resources when…
Affected: 11.5.1 through 11.6.5; 12.1.0 through 12.1.4.1; 13.1.0 through 13.1.1.5; 14.0.0 through 14.0.0.4; 14.1.0 through 14.1.0.5; 15.0.0 through 15.0.1
CVE-2019-6666
7.5
1%
Nov 27
On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, and 13.1.0-13.1.1.4, the TMM process may produce a core file when an upstream server or cache sends the BIG-IP an…
Affected: 13.1.0 through 13.1.1.4; 14.0.0 through 14.0.0.4; 14.1.0 through 14.1.0.5; 15.0.0 through 15.0.1
CVE-2019-6664
7.5
1%
Nov 15
On BIG-IP 15.0.0 and 14.1.0-14.1.0.6, under certain conditions, network protections on the management port do not follow current best practices
Affected: 14.1.0 before 14.1.2; 15.0.0
CVE-2019-6660
7.5
1%
Nov 15
On BIG-IP 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.1, undisclosed HTTP requests may consume excessive amounts of systems resources which may lead to a denial of service
Affected: 13.1.0 before 13.1.3; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.2.1
CVE-2019-6659
7.5
1%
Nov 15
On version 14.0.0-14.1.0.1, BIG-IP virtual servers with TLSv1.3 enabled may experience a denial of service due to undisclosed incoming messages
Affected: 14.0.0 before 14.1.0.2
CVE-2018-5743
7.5
6%
Oct 9
By design, BIND is intended to limit the number of TCP clients that can be connected at any given time
Affected: 11.5.2 through 11.6.5; 12.1.0 through 12.1.4; 13.1.0 through 13.1.1; 14.0.0 through 14.1.0; 15.0.0
CVE-2018-14880
7.5
5%
Oct 3
The OSPFv3 parser in tcpdump before 4.9.3 has a buffer over-read in print-ospf6.c:ospf6_print_lshdr()
Affected: 11.5.2 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3; 14.0.0 through 14.1.2; 15.0.0 through 15.0.1
CVE-2018-14468
7.5
4%
Oct 3
The FRF.16 parser in tcpdump before 4.9.3 has a buffer over-read in print-fr.c:mfr_print()
Affected: 11.6.0 through 11.6.5; 12.1.0 through 12.1.5; 13.1.0 through 13.1.3; 14.0.0 through 14.1.2; 15.0.0 through 15.0.1
CVE-2019-6643
7.5
1%
Sep 4
On versions 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.2, 12.1.0-12.1.4.1, and 11.5.2-11.6.4, an attacker sending specifically crafted DHCPv6 requests through a BIG-IP virtual…
Affected: 11.5.2 through 11.6.4; 12.1.0 through 12.1.4; 13.0.0 through 13.1.1; 14.0.0; 14.1.0
CVE-2019-6645
7.5
1%
Sep 4
On BIG-IP 14.0.0-14.1.0.5, 13.0.0-13.1.2, 12.1.0-12.1.4.1, 11.5.2-11.6.4, FTP traffic passing through a Virtual Server with both an active FTP profile associated and connection…
Affected: 11.5.2 through 11.6.4; 12.1.0 through 12.1.4; 13.0.0 through 13.1.1; 14.0.0; 14.1.0
CVE-2019-6631
7.5
3%
Jul 3
On BIG-IP 11.5.1-11.6.4, iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated…
Affected: 11.5.2 through 11.6.4
CVE-2019-6629
7.5
1%
Jul 3
On BIG-IP 14.1.0-14.1.0.5, undisclosed SSL traffic to a virtual server configured with a Client SSL profile may cause TMM to fail and restart
Affected: 14.1.0.1 through 14.1.0.5
CVE-2019-6623
7.5
3%
Jul 2
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, undisclosed traffic sent to BIG-IP iSession virtual server may cause the Traffic Management…
Affected: 12.1.0 through 12.1.4; 13.0.0 through 13.1.1.4; 14.0.0 through 14.0.0.4; 14.1.0 through 14.1.0.5
CVE-2019-6624
7.5
1%
Jul 2
On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, and 12.1.0-12.1.4, an undisclosed traffic pattern sent to a BIG-IP UDP virtual server may lead to a denial-of-service…
Affected: 12.1.0 through 12.1.4; 13.0.0 through 13.1.1.4; 14.0.0 through 14.0.0.4; 14.1.0 through 14.1.0.5
CVE-2019-11479
7.5
92%
Jun 19
Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes
Affected: 11.5.2 before 11.6.5.1; 12.1.0 before 12.1.5.1; 13.1.0 before 13.1.3.2; 14.0.0 before 14.0.1.1; 14.1.2 before 14.1.2.1; 15.0.0 before 15.0.1.1
CVE-2019-11478
7.5
95%
Jun 19
Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective…
Affected: 11.5.2 through 11.6.4; 12.1.0 through 12.1.4; 13.1.0 through 13.1.1; 14.0.0 through 14.1.0; 15.0.0
CVE-2019-11477
7.5
99%
Jun 19
Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs)
Affected: 11.5.2 through 11.6.4; 12.1.0 through 12.1.4; 13.1.0 through 13.1.1; 14.0.0 through 14.1.0; 15.0.0
CVE-2019-12295
7.5
4%
May 23
In Wireshark 3.0.0 to 3.0.1, 2.6.0 to 2.6.8, and 2.4.0 to 2.4.14, the dissection engine could crash
Affected: 12.1.3.6 before 12.1.5.3; 13.1.1.2 before 13.1.3.5; 14.0.0.3 through 14.0.1; 14.1.0 before 14.1.2.8; 15.0.0 through 15.0.1; 15.1.0
Page 2 of 3 · 149 total
123