Login Request a demo
BW
Product
Big-ip Websafe
by F5 · last CVE Sep 2, 2026
On CISA KEVExploited in the wildRansomware-linked
175
CVEs
3
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities175In the news0Timeline
Severity mix
Critical 7High 100Medium 66Low 2
Severity
All severities175Critical7High100Medium66Low2
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add Big-ip Websafe to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-20045
7.5
0%
Feb 5
BIG-IP SIP MRF Vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.5; 17.1.0 before 17.1.2
CVE-2025-20058
7.5
0%
Feb 5
BIG-IP message routing vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
CVE-2025-21091
7.5
0%
Feb 5
BIG-IP SNMP vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
CVE-2025-21087
7.5
0%
Feb 5
TMM Vulnerability
Affected: 15.1.0 through 15.1.10; 16.1.0 before 16.1.6; 17.1.0 before 17.1.2
CVE-2024-41727
7.5
0%
Aug 14
BIG-IP TMM vulnerability
Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0
CVE-2024-41164
7.5
0%
Aug 14
BIG-IP MPTCP vulnerability
Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0
CVE-2024-39778
7.5
0%
Aug 14
BIG-IP HSB vulnerability
Affected: 15.1.0 through 15.1.1; 16.1.0 before 16.1.5; 17.1.0
CVE-2024-25560
7.5
1%
May 8
TMM Vulnerability
Affected: 15.1.0 before 15.1.10.8; 16.1.0 before 16.1.4; 17.1.0
CVE-2024-33608
7.5
1%
May 8
BIG-IP IPsec vulnerability
Affected: 17.1.0
CVE-2023-41085
7.5
1%
Oct 10
BIG-IP IPSEC vulnerability
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4
CVE-2023-40542
7.5
1%
Oct 10
BIG-IP TCP Profile vulnerability
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4
CVE-2023-40534
7.5
1%
Oct 10
BIG-IP HTTP/2 vulnerability
Affected: 16.1.0 before 16.1.4.1; 17.1.0
CVE-2023-29163
7.5
1%
May 3
BIG-IP UDP Profile vulnerability
Affected: 14.1.0 before 14.1.5.4; 15.1.0 before 15.1.8.2; 16.1.0 before 16.1.3.4; 17.0.0
CVE-2002-20001
7.5
25%
Nov 11
The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive…
Affected: 13.1.0 through 17.1.2; 17.5.0
CVE-2019-6631
7.5
3%
Jul 3
On BIG-IP 11.5.1-11.6.4, iRules performing HTTP header manipulation may cause an interruption to service when processing traffic handled by a Virtual Server with an associated…
Affected: 11.5.2 through 11.6.4
CVE-2019-6629
7.5
1%
Jul 3
On BIG-IP 14.1.0-14.1.0.5, undisclosed SSL traffic to a virtual server configured with a Client SSL profile may cause TMM to fail and restart
Affected: 14.1.0.1 through 14.1.0.5
CVE-2018-5530
7.5
2%
Jul 25
F5 BIG-IP 13.0.0-13.1.0.5, 12.1.0-12.1.3.5, or 11.6.0-11.6.3.1 virtual servers with HTTP/2 profiles enabled are vulnerable to "HPACK Bomb"
Affected: 11.6.0 through 11.6.3.1; 12.1.0 through 12.1.3.5; 13.0.0 through 13.1.0.5
CVE-2018-5527
7.5
3%
Jun 27
On BIG-IP 13.1.0-13.1.0.7, a remote attacker using undisclosed methods against virtual servers configured with a Client SSL or Server SSL profile that has the SSL Forward Proxy…
Affected: 13.0.0 through 13.1.0.7
CVE-2018-5513
7.5
2%
Jun 1
On F5 BIG-IP 13.1.0-13.1.0.3, 13.0.0, 12.1.0-12.1.3.3, 11.6.1-11.6.3.1, 11.5.1-11.5.5, or 11.2.1, a malformed TLS handshake causes TMM to crash leading to a disruption of service
Affected: 11.2.1 through 11.5.5; 11.6.1 through 11.6.3; 12.1.0 through 12.1.3; 13.1.0 through 13.1.0.4; 13.0.0
CVE-2018-5517
7.5
2%
May 2
On F5 BIG-IP 13.1.0-13.1.0.5, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an interruption of service
Affected: 13.1.0 through 13.1.0.5
CVE-2018-5514
7.5
4%
May 2
On F5 BIG-IP 13.1.0-13.1.0.5, maliciously crafted HTTP/2 request frames can lead to denial of service
Affected: 13.1.0 through 13.1.0.5
CVE-2018-5512
7.5
3%
May 2
On F5 BIG-IP 13.1.0-13.1.0.5, when Large Receive Offload (LRO) and SYN cookies are enabled (default settings), undisclosed traffic patterns may cause TMM to restart
Affected: 13.1.0 through 13.1.0.5
CVE-2018-5510
7.5
1%
Apr 13
On F5 BIG-IP 11.5.4 HF4-11.5.5, the Traffic Management Microkernel (TMM) may restart when processing a specific sequence of packets on IPv6 virtual servers
Affected: 11.5.4; 11.5.4; 11.5.4; 11.5.4; 11.5.4; 11.5.5
CVE-2018-5507
7.5
1%
Apr 13
On F5 BIG-IP versions 13.0.0, 12.1.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5, vCMP guests running on VIPRION 2100, 4200 and 4300 series blades cannot correctly decrypt…
Affected: 11.5.1 through 11.5.5; 11.6.1 through 11.6.2; 12.1.0 through 12.1.3; 13.0.0
CVE-2017-6155
7.5
1%
Apr 13
On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or HTTP/2 requests may result in a disruption of service to TMM
Affected: 11.5.1 through 11.5.5; 11.6.1 through 11.6.2; 12.1.0 through 12.1.3; 11.2.1; 13.0.0
CVE-2017-6148
7.5
1%
Apr 13
Responses to SOCKS proxy requests made through F5 BIG-IP version 13.0.0, 12.0.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5 may cause a disruption of services provided by TMM
Affected: 11.5.1 through 11.5.5; 11.6.1 through 11.6.2; 12.0.0 through 12.1.3; 13.0.0
CVE-2018-5509
7.5
3%
Mar 22
On F5 BIG-IP versions 13.0.0 or 12.1.0 - 12.1.3.1, when a specifically configured virtual server receives traffic of an undisclosed nature, TMM will crash and take the configured…
Affected: 1.0.0
CVE-2018-5502
7.5
1%
Mar 22
On F5 BIG-IP versions 13.0.0 - 13.1.0.3, attackers may be able to disrupt services on the BIG-IP system with maliciously crafted client certificate
Affected: 1.0.0
CVE-2017-6150
7.5
2%
Mar 1
Under certain conditions for F5 BIG-IP systems 13.0.0 or 12.1.0 - 12.1.3.1, using FastL4 profiles, when the Reassemble IP Fragments option is disabled (default), some specific…
Affected: 12.1.0 through 12.1.3.1; 13.0.0
CVE-2017-6167
7.5
1%
Dec 21
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, race conditions in iControl REST may lead to…
Affected: 12.1.0 through 12.1.2; 13.0.0
CVE-2017-6151
7.5
2%
Dec 21
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 13.0.0, undisclosed requests made to…
Affected: 13.0.0
CVE-2017-6138
7.5
2%
Dec 21
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, malicious requests made to virtual servers…
Affected: 12.1.0 through 12.1.2; 13.0.0
CVE-2017-6135
7.5
2%
Dec 21
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, a slow memory leak as a result of undisclosed IPv4 or IPv6…
Affected: 13.0.0
CVE-2017-6133
7.5
2%
Dec 21
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, undisclosed HTTP requests may cause a denial of…
Affected: 12.1.0 through 12.1.2; 13.0.0
CVE-2017-6132
7.5
3%
Dec 21
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 and 11.5.0 - 11.5.4, an…
Affected: 11.6.0 through 11.6.1; 12.0.0 through 12.1.2; 11.5.0; 11.5.1; 11.5.2; 11.5.3; +2 more
CVE-2017-0303
7.5
3%
Oct 27
In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 11.6.1, under limited…
Affected: 1.0.0
CVE-2016-7476
7.5
2%
May 11
The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, APM, ASM, GTM, Link Controller, PEM, PSM, and WebSafe 11.6.0 before 11.6.0 HF6, 11.5.0 before 11.5.3 HF2, and…
Affected: 11.6.0
CVE-2016-9250
7.5
1%
May 10
In F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user with access to the control plane may be able to delete arbitrary files through an…
Affected: 11.6.0; 11.6.1; 12.0.0; 12.1.0; 12.1.1; 12.1.2
CVE-2016-9256
7.5
1%
May 9
In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the role_map is not reloaded between the time the…
Affected: 12.0.0; 12.1.0; 12.1.1; 12.1.2
CVE-2016-9253
7.5
1%
May 9
In F5 BIG-IP 12.1.0 through 12.1.2, specific websocket traffic patterns may cause a disruption of service for virtual servers configured to use the websocket profile
Affected: 12.1.0; 12.1.1; 12.1.2
CVE-2017-6128
7.5
1%
May 1
An attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in F5 BIG-IP, Enterprise Manager, BIG-IQ, and iWorkflow
Affected: 11.6.0; 11.6.1
CVE-2016-9252
7.5
2%
Mar 27
The Traffic Management Microkernel (TMM) in F5 BIG-IP before 11.5.4 HF3, 11.6.x before 11.6.1 HF2 and 12.x before 12.1.2 does not properly handle minimum path MTU options for…
Affected: 11.6.0; 11.6.1; 12.0.0; 12.1.0; 12.1.1
CVE-2016-9249
7.5
2%
Jan 31
An undisclosed traffic pattern received by a BIG-IP Virtual Server with TCP Fast Open enabled may cause the Traffic Management Microkernel (TMM) to restart, resulting in a…
Affected: 12.0.0; 12.1.0; 12.1.1
CVE-2016-5736
7.5
2%
Aug 19
The default configuration of the IPsec IKE peer listener in F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.1 before HF16, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x…
Affected: 11.6.0; 12.0.0
CVE-2015-8022
7.5
3%
Aug 19
The Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x before 11.2.1 HF16, 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.4, and…
Affected: 11.6.0
CVE-2017-6145
7.3
1%
Oct 20
iControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 through 12.1.2 and 13.0.0 includes a service to convert authorization…
Affected: 12.1.0; 12.1.1; 12.1.2; 13.0.0
CVE-2026-39459
7.2
0%
May 13
iControl REST and tmsh vulnerability
Affected: 17.1.0 through 17.1.3; 17.5.0 through 17.5.1; 16.1.0 through 16.1.6; 21.0.0
CVE-2024-45844
7.2
11%
Oct 16
BIG-IP monitors vulnerability
Affected: 15.1.0 before 15.1.10.5; 16.1.0 before 16.1.5; 17.1.0 before 17.1.1.4
CVE-2023-42768
7.2
1%
Oct 10
BIG-IP iControl REST vulnerability
Affected: 13.1.0 through 13.1.5; 14.1.0 through 14.1.5; 15.1.0 before 15.1.9; 16.1.0 before 16.1.4
CVE-2018-5511
7.2
14%
Apr 13
On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP…
Affected: 13.0.0; 13.1.0
Page 2 of 2 · 100 total
12