BI
Network Security
BIG-IP
On CISA KEVExploited in the wildRansomware-linked
143
CVEs
7
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 91Medium 36Low 3
Watch
Add BIG-IP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-46706 | 7.5 | Oct 15 | BIG-IP iRules vulnerability Affected: 17.1.0 before 17.1.2.2; 16.1.0 before 16.1.6 |
| CVE-2025-55669 | 7.5 | Oct 15 | BIG-IP HTTP/2 vulnerability Affected: 17.1.0 before 17.1.2.2; 16.1.0 before 16.1.6 |
| CVE-2025-48008 | 7.5 | Oct 15 | BIG-IP MPTCP vulnerability Affected: 17.1.0 before 17.1.2.2; 16.1.0 before 16.1.6; 15.1.0 before 15.1.10.8 |
| CVE-2025-60016 | 7.5 | Oct 15 | BIG-IP SSL/TLS vulnerability Affected: 17.1.0 before 17.1.2 |
| CVE-2025-59478 | 7.5 | Oct 15 | BIG-IP AFM DoS protection profile vulnerability Affected: 17.5.0 before 17.5.1; 17.1.0 before 17.1.3; 15.1.0 before 15.1.10.8 |
| CVE-2025-53474 | 7.5 | Oct 15 | BIG-IP iRules vulnerability Affected: 17.5.0 before 17.5.1.3; 17.1.0 before 17.1.3; 16.1.0 before 16.1.6.1; 15.1.0 before 15.1.10.8 |
| CVE-2025-46405 | 7.5 | Aug 13 | BIG-IP APM vulnerability Affected: 17.1.0 before 17.1.2.2; 16.1.0 before 16.1.6; 15.1.0 |
| CVE-2025-52585 | 7.5 | Aug 13 | BIG-IP Client SSL profile vulnerability Affected: 17.1.0 before 17.1.2.2; 16.1.0 before 16.1.6; 15.1.0 |
| CVE-2025-41431 | 7.5 | May 7 | TMM Vulnerability Affected: 17.1.0 before 17.1.2.2 |
| CVE-2025-35995 | 7.5 | May 7 | BIG-IP PEM vulnerability Affected: 17.1.0 before 17.1.2.2; 16.1.0 before 16.1.6; 15.1.0 |
| CVE-2025-36525 | 7.5 | May 7 | BIG-IP APM PingAccess Virtual Server Vulnerability Affected: 17.1.0 before 17.1.2.2; 16.1.0 before 16.1.6; 15.1.0 |
| CVE-2025-36504 | 7.5 | May 7 | BIG-IP HTTP/2 vulnerability Affected: 17.1.0 before 17.1.2; 16.1.0 before 16.1.6 |
| CVE-2025-41414 | 7.5 | May 7 | BIG-IP HTTP/2 vulnerability Affected: 17.1.0 before 17.1.2; 16.1.0 before 16.1.5; 15.1.0 |
| CVE-2025-41433 | 7.5 | May 7 | BIG-IP SIP ALG profile vulnerability Affected: 17.1.0 before 17.1.2; 16.1.0 before 16.1.5; 15.1.0 |
| CVE-2025-36557 | 7.5 | May 7 | BIG-IP HTTP vulnerability Affected: 17.1.0 before 17.1.2; 16.1.0 before 16.1.5 |
| CVE-2025-41399 | 7.5 | May 7 | SCTP Vulnerability Affected: 17.1.0 before 17.1.1; 16.1.0 before 16.1.4; 15.1.0 before 15.1.9 |
| CVE-2025-24497 | 7.5 | Feb 5 | BIG-IP PEM vulnerability Affected: 17.1.0 before 17.1.2 |
| CVE-2025-24312 | 7.5 | Feb 5 | BIG-IP AFM vulnerability Affected: 17.1.0 before 17.1.2; 16.1.0; 15.1.0 |
| CVE-2025-22846 | 7.5 | Feb 5 | BIG-IP SIP Vulnerability Affected: 17.1.0 before 17.1.2; 16.1.0 before 16.1.5; 15.1.0 |
| CVE-2025-23412 | 7.5 | Feb 5 | BIG-IP APM access profile vulnerability Affected: 17.1.0 before 17.1.2; 16.1.3 before 16.1.5 |
| CVE-2025-24326 | 7.5 | Feb 5 | BIG-IP Advanced WAF/ASM BADoS vulnerability Affected: 17.1.0 before 17.1.2; 16.1.0 before 16.1.5; 15.1.0 |
| CVE-2025-20045 | 7.5 | Feb 5 | BIG-IP SIP MRF Vulnerability Affected: 17.1.0 before 17.1.2; 16.1.0 before 16.1.5; 15.1.0 |
| CVE-2025-22891 | 7.5 | Feb 5 | BIG-IP PEM Vulnerability Affected: 17.1.0 before 17.1.2; 16.1.0 before 16.1.5; 15.1.0 |
| CVE-2025-20058 | 7.5 | Feb 5 | BIG-IP message routing vulnerability Affected: 17.1.0 before 17.1.2; 16.1.0; 15.1.0 |
| CVE-2025-21091 | 7.5 | Feb 5 | BIG-IP SNMP vulnerability Affected: 17.1.0 before 17.1.2; 16.1.0; 15.1.0 |
| CVE-2025-21087 | 7.5 | Feb 5 | TMM Vulnerability Affected: 17.1.0 before 17.1.2; 16.1.0; 15.1.0 |
| CVE-2022-41833 | 7.5 | Oct 19 | BIG-IP iRule vulnerability CVE-2022-41833 Affected: 13.1.0 before 13.1.x* |
| CVE-2022-41832 | 7.5 | Oct 19 | BIG-IP SIP vulnerability CVE-2022-41832 Affected: 17.0.x before 17.0.0.1; 16.1.x before 16.1.3.1; 15.1.x before 15.1.6.1; 14.1.x before 14.1.5.1; 13.1.x before 13.1.5.1 |
| CVE-2022-41624 | 7.5 | Oct 19 | BIG-IP iRules vulnerability CVE-2022-41624 Affected: 17.0.x before 17.0.0.1; 16.1.x before 16.1.3.2; 15.1.x before 15.1.7; 14.1.x before 14.1.5.2; 13.1.x before 13.1.5.1 |
| CVE-2022-36795 | 7.5 | Oct 19 | BIG-IP software SYN cookies vulnerability CVE-2022-36795 Affected: 17.0.x before 17.0.0.1; 16.1.x before 16.1.3.1; 15.1.x before 15.1.7; 14.1.x before 14.1.5.1 |
| CVE-2022-35240 | 7.5 | Aug 4 | BIG-IP Message Routing MQTT vulnerability CVE-2022-35240 Affected: 14.1.x before 14.1.5; 15.1.x before 15.1.6.1; 16.1.x before 16.1.2.2 |
| CVE-2022-35236 | 7.5 | Aug 4 | HTTP2 profile vulnerability CVE-2022-35236 Affected: 14.1.x before 14.1.5; 15.1.x before 15.1.6.1; 16.1.x before 16.1.2.2 |
| CVE-2022-34862 | 7.5 | Aug 4 | TMM vulnerability CVE-2022-34862 Affected: 13.1.0 before 13.1.x*; 14.1.x before 14.1.5; 15.1.x before 15.1.6.1; 16.1.x before 16.1.3.1 |
| CVE-2022-34844 | 7.5 | Aug 4 | BIG-IP and BIG-IQ AWS vulnerability CVE-2022-34844 Affected: 15.1.x before 15.1.6.1; 16.1.x before 16.1.3.1 |
| CVE-2022-34655 | 7.5 | Aug 4 | TMM vulnerability CVE-2022-34655 Affected: 14.1.x before 14.1.5; 15.1.x before 15.1.6.1; 16.0.x before 16.0.1.1 |
| CVE-2022-34651 | 7.5 | Aug 4 | BIG-IP TLS 1.3 iRule vulnerability CVE-2022-34651 Affected: 15.1.x before 15.1.6.1; 16.1.x before 16.1.3.1 |
| CVE-2022-32455 | 7.5 | Aug 4 | TMM vulnerability CVE-2022-32455 Affected: 13.1.0; 14.1.0 before 14.1.5; 15.1.0 before 15.1.6.1; 16.1.0 before 16.1.2.2 |
| CVE-2025-48500 | 7.3 | Aug 13 | BIG-IP APM VPN web client for macOS vulnerability Affected: 17.5.0; 17.1.0; 16.1.0; 15.1.0 |
| CVE-2026-39459 | 7.2 | May 13 | iControl REST and tmsh vulnerability Affected: 21.0.0 before 21.0.0.2; 17.5.0 before 17.5.1.6; 17.1.0 before 17.1.3.2; 16.1.0 |
| CVE-2024-45844 | 7.2 | Oct 16 | BIG-IP monitors vulnerability Affected: 17.1.0 before 17.1.1.4; 16.1.0 before 16.1.5; 15.1.0 before 15.1.10.5 |
| CVE-2022-35735 | 7.2 | Aug 4 | BIG-IP monitor configuration vulnerability CVE-2022-35735 Affected: 13.1.0 before 13.1.x*; 14.1.x before 14.1.5.1; 15.1.x before 15.1.6.1; 16.1.x before 16.1.3.1 |