F5
8 CVEs in CISA KEV — 4 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2023-46747 |
BIG-IP Configuration Utility | — | 0.9675 | 2023-10-31 | 2023-11-21 | RW | F5 BIG-IP Configuration utility contains an authentication bypass using an alter |
CVE-2026-94127 |
BIG-IP APM | — | 0.2494 | 2026-09-22 | 2026-09-25 | F5 BIG-IP APM contains a heap-based buffer overflow vulnerability when access po | |
CVE-2023-46748 |
BIG-IP Configuration Utility | — | 0.0423 | 2023-10-31 | 2023-11-21 | F5 BIG-IP Configuration utility contains an SQL injection vulnerability that may | |
CVE-2025-53521 |
BIG-IP | — | 0.0230 | 2026-03-27 | 2026-03-30 | F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that could al | |
CVE-2022-1388 |
BIG-IP | — | — | 2022-05-10 | 2022-05-31 | RW | F5 BIG-IP contains a missing authentication in critical function vulnerability w |
CVE-2021-22991 |
BIG-IP Traffic Management Microkernel | — | — | 2022-01-18 | 2022-02-01 | The Traffic Management Microkernel of BIG-IP ASM Risk Engine has a buffer overfl | |
CVE-2020-5902 |
BIG-IP | — | — | 2021-11-03 | 2022-05-03 | RW | F5 BIG-IP Traffic Management User Interface (TMUI) contains a remote code execut |
CVE-2021-22986 |
BIG-IP and BIG-IQ Centralized Management | — | — | 2021-11-03 | 2021-11-17 | RW | F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vuln |