[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-760M4Q8s82kLsjACzXB099OwRq43Rvw4ZhL9AyjWKA":3,"g5a-family:f5\u002Fbig-ip_advanced_web_application_firewall":484,"g5a-ex:f5\u002Fbig-ip_advanced_web_application_firewall@*":485},{"success":4,"data":5},true,{"product":6,"versions":261,"topVulnerabilitiesByEpss":381,"kevVulnerabilities":434,"seoMetadata":462,"meta":481},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":260},"f5","big-ip_advanced_web_application_firewall",119,116,6,"2025-10-15",[14,19,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,118,120,122,124,126,128,130,132,134,136,138,140,142,144,146,148,150,152,154,156,158,160,162,164,166,168,170,172,174,176,178,180,182,184,186,188,190,192,194,196,198,200,202,204,206,208,210,212,214,216,218,220,223,225,228,230,232,234,236,238,240,242,244,246,248,250,252,254,256,258],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"11.6.1",1,0,false,{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},"11.6.2",2,{"version":23,"cve_count":16,"kev_count":17,"has_kev":18},"11.6.3",{"version":25,"cve_count":16,"kev_count":17,"has_kev":18},"11.6.4",{"version":27,"cve_count":16,"kev_count":17,"has_kev":18},"11.6.5",{"version":29,"cve_count":17,"kev_count":17,"has_kev":18},"11.6.5.2",{"version":31,"cve_count":16,"kev_count":17,"has_kev":18},"12.1.0",{"version":33,"cve_count":16,"kev_count":17,"has_kev":18},"12.1.1",{"version":35,"cve_count":21,"kev_count":17,"has_kev":18},"12.1.2",{"version":37,"cve_count":16,"kev_count":17,"has_kev":18},"12.1.3",{"version":39,"cve_count":16,"kev_count":17,"has_kev":18},"12.1.4",{"version":41,"cve_count":16,"kev_count":17,"has_kev":18},"12.1.5",{"version":43,"cve_count":16,"kev_count":17,"has_kev":18},"12.1.5.2",{"version":45,"cve_count":17,"kev_count":17,"has_kev":18},"12.1.5.3",{"version":47,"cve_count":16,"kev_count":17,"has_kev":18},"12.1.6",{"version":49,"cve_count":16,"kev_count":17,"has_kev":18},"13.0.0",{"version":51,"cve_count":52,"kev_count":17,"has_kev":18},"13.1.0",4,{"version":54,"cve_count":52,"kev_count":17,"has_kev":18},"13.1.1",{"version":56,"cve_count":52,"kev_count":17,"has_kev":18},"13.1.3",{"version":58,"cve_count":17,"kev_count":17,"has_kev":18},"13.1.3.4",{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},"13.1.3.5",{"version":62,"cve_count":17,"kev_count":17,"has_kev":18},"13.1.3.6",{"version":64,"cve_count":52,"kev_count":17,"has_kev":18},"13.1.4",{"version":66,"cve_count":52,"kev_count":17,"has_kev":18},"13.1.5",{"version":68,"cve_count":17,"kev_count":17,"has_kev":18},"13.1.5.1",{"version":70,"cve_count":17,"kev_count":17,"has_kev":18},"14.0.0",{"version":72,"cve_count":17,"kev_count":17,"has_kev":18},"14.0.1",{"version":74,"cve_count":52,"kev_count":17,"has_kev":18},"14.1.0",{"version":76,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.0.1",{"version":78,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.0.3",{"version":80,"cve_count":52,"kev_count":17,"has_kev":18},"14.1.2",{"version":82,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.2-0.0.37",{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.2-0.89.37",{"version":86,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.2.1",{"version":88,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.2.1-0.0.4",{"version":90,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.2.2",{"version":92,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.2.2-0.0.4",{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.2.3",{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.2.3-0.0.5",{"version":98,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.2.5",{"version":100,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.2.5-0.0.3",{"version":102,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.2.6",{"version":104,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.2.6-0.0.2",{"version":106,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.2.7",{"version":108,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.2.7-0.0.5",{"version":110,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.2.8",{"version":112,"cve_count":52,"kev_count":17,"has_kev":18},"14.1.3",{"version":114,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.3.1",{"version":116,"cve_count":117,"kev_count":17,"has_kev":18},"14.1.4",5,{"version":119,"cve_count":16,"kev_count":17,"has_kev":18},"14.1.5",{"version":121,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.5.1",{"version":123,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.5.2",{"version":125,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.5.3",{"version":127,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.5.4",{"version":129,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.5.5",{"version":131,"cve_count":17,"kev_count":17,"has_kev":18},"15.0.0",{"version":133,"cve_count":17,"kev_count":17,"has_kev":18},"15.0.1",{"version":135,"cve_count":17,"kev_count":17,"has_kev":18},"15.0.1.4",{"version":137,"cve_count":117,"kev_count":17,"has_kev":18},"15.1.0",{"version":139,"cve_count":17,"kev_count":17,"has_kev":18},"15.1.0.2",{"version":141,"cve_count":17,"kev_count":17,"has_kev":18},"15.1.0.4",{"version":143,"cve_count":17,"kev_count":17,"has_kev":18},"15.1.0.5",{"version":145,"cve_count":52,"kev_count":17,"has_kev":18},"15.1.1",{"version":147,"cve_count":17,"kev_count":17,"has_kev":18},"15.1.10",{"version":149,"cve_count":17,"kev_count":17,"has_kev":18},"15.1.10.4",{"version":151,"cve_count":17,"kev_count":17,"has_kev":18},"15.1.10.5",{"version":153,"cve_count":17,"kev_count":17,"has_kev":18},"15.1.10.6",{"version":155,"cve_count":17,"kev_count":17,"has_kev":18},"15.1.10.7",{"version":157,"cve_count":17,"kev_count":17,"has_kev":18},"15.1.1.0.8",{"version":159,"cve_count":17,"kev_count":17,"has_kev":18},"15.1.10.8",{"version":161,"cve_count":52,"kev_count":17,"has_kev":18},"15.1.2",{"version":163,"cve_count":17,"kev_count":17,"has_kev":18},"15.1.2.1",{"version":165,"cve_count":52,"kev_count":17,"has_kev":18},"15.1.3",{"version":167,"cve_count":52,"kev_count":17,"has_kev":18},"15.1.4",{"version":169,"cve_count":16,"kev_count":17,"has_kev":18},"15.1.4.1",{"version":171,"cve_count":52,"kev_count":17,"has_kev":18},"15.1.5",{"version":173,"cve_count":17,"kev_count":17,"has_kev":18},"15.1.6",{"version":175,"cve_count":17,"kev_count":17,"has_kev":18},"15.1.7",{"version":177,"cve_count":17,"kev_count":17,"has_kev":18},"15.1.8",{"version":179,"cve_count":17,"kev_count":17,"has_kev":18},"15.1.8.2",{"version":181,"cve_count":17,"kev_count":17,"has_kev":18},"15.1.9",{"version":183,"cve_count":17,"kev_count":17,"has_kev":18},"15.1.9.1",{"version":185,"cve_count":17,"kev_count":17,"has_kev":18},"16.0.0",{"version":187,"cve_count":16,"kev_count":17,"has_kev":18},"16.0.1",{"version":189,"cve_count":16,"kev_count":17,"has_kev":18},"16.0.1.1",{"version":191,"cve_count":52,"kev_count":17,"has_kev":18},"16.1.0",{"version":193,"cve_count":52,"kev_count":17,"has_kev":18},"16.1.1",{"version":195,"cve_count":117,"kev_count":17,"has_kev":18},"16.1.2",{"version":197,"cve_count":17,"kev_count":17,"has_kev":18},"16.1.3",{"version":199,"cve_count":17,"kev_count":17,"has_kev":18},"16.1.3.1",{"version":201,"cve_count":17,"kev_count":17,"has_kev":18},"16.1.3.3",{"version":203,"cve_count":17,"kev_count":17,"has_kev":18},"16.1.3.4",{"version":205,"cve_count":17,"kev_count":17,"has_kev":18},"16.1.3.5",{"version":207,"cve_count":17,"kev_count":17,"has_kev":18},"16.1.4",{"version":209,"cve_count":17,"kev_count":17,"has_kev":18},"16.1.4.1",{"version":211,"cve_count":17,"kev_count":17,"has_kev":18},"16.1.4.3",{"version":213,"cve_count":17,"kev_count":17,"has_kev":18},"16.1.5",{"version":215,"cve_count":17,"kev_count":17,"has_kev":18},"16.1.5.2",{"version":217,"cve_count":17,"kev_count":17,"has_kev":18},"16.1.6",{"version":219,"cve_count":17,"kev_count":17,"has_kev":18},"16.1.6.1",{"version":221,"cve_count":222,"kev_count":17,"has_kev":18},"17.0.0",3,{"version":224,"cve_count":17,"kev_count":17,"has_kev":18},"17.0.0.2",{"version":226,"cve_count":227,"kev_count":16,"has_kev":4},"17.1.0",8,{"version":229,"cve_count":17,"kev_count":17,"has_kev":18},"17.1.0.1",{"version":231,"cve_count":17,"kev_count":17,"has_kev":18},"17.1.0.2",{"version":233,"cve_count":17,"kev_count":17,"has_kev":18},"17.1.1",{"version":235,"cve_count":17,"kev_count":17,"has_kev":18},"17.1.1.3",{"version":237,"cve_count":17,"kev_count":17,"has_kev":18},"17.1.1.4",{"version":239,"cve_count":17,"kev_count":17,"has_kev":18},"17.1.2",{"version":241,"cve_count":17,"kev_count":17,"has_kev":18},"17.1.2.1",{"version":243,"cve_count":17,"kev_count":17,"has_kev":18},"17.1.2.2",{"version":245,"cve_count":17,"kev_count":17,"has_kev":18},"17.1.3",{"version":247,"cve_count":17,"kev_count":17,"has_kev":18},"17.1.3.1",{"version":249,"cve_count":52,"kev_count":17,"has_kev":18},"17.5.0",{"version":251,"cve_count":17,"kev_count":17,"has_kev":18},"17.5.1",{"version":253,"cve_count":17,"kev_count":17,"has_kev":18},"17.5.1.1",{"version":255,"cve_count":17,"kev_count":17,"has_kev":18},"17.5.1.2",{"version":257,"cve_count":17,"kev_count":17,"has_kev":18},"17.5.1.3",{"version":259,"cve_count":17,"kev_count":17,"has_kev":18},"17.5.1.4","Big-ip Advanced Web Application Firewall by F5 is a technology product with 119 tracked versions and 116 known security vulnerabilities including 6 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},{"version":23,"cve_count":16,"kev_count":17,"has_kev":18},{"version":25,"cve_count":16,"kev_count":17,"has_kev":18},{"version":27,"cve_count":16,"kev_count":17,"has_kev":18},{"version":29,"cve_count":17,"kev_count":17,"has_kev":18},{"version":31,"cve_count":16,"kev_count":17,"has_kev":18},{"version":33,"cve_count":16,"kev_count":17,"has_kev":18},{"version":35,"cve_count":21,"kev_count":17,"has_kev":18},{"version":37,"cve_count":16,"kev_count":17,"has_kev":18},{"version":39,"cve_count":16,"kev_count":17,"has_kev":18},{"version":41,"cve_count":16,"kev_count":17,"has_kev":18},{"version":43,"cve_count":16,"kev_count":17,"has_kev":18},{"version":45,"cve_count":17,"kev_count":17,"has_kev":18},{"version":47,"cve_count":16,"kev_count":17,"has_kev":18},{"version":49,"cve_count":16,"kev_count":17,"has_kev":18},{"version":51,"cve_count":52,"kev_count":17,"has_kev":18},{"version":54,"cve_count":52,"kev_count":17,"has_kev":18},{"version":56,"cve_count":52,"kev_count":17,"has_kev":18},{"version":58,"cve_count":17,"kev_count":17,"has_kev":18},{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},{"version":62,"cve_count":17,"kev_count":17,"has_kev":18},{"version":64,"cve_count":52,"kev_count":17,"has_kev":18},{"version":66,"cve_count":52,"kev_count":17,"has_kev":18},{"version":68,"cve_count":17,"kev_count":17,"has_kev":18},{"version":70,"cve_count":17,"kev_count":17,"has_kev":18},{"version":72,"cve_count":17,"kev_count":17,"has_kev":18},{"version":74,"cve_count":52,"kev_count":17,"has_kev":18},{"version":76,"cve_count":17,"kev_count":17,"has_kev":18},{"version":78,"cve_count":17,"kev_count":17,"has_kev":18},{"version":80,"cve_count":52,"kev_count":17,"has_kev":18},{"version":82,"cve_count":17,"kev_count":17,"has_kev":18},{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},{"version":86,"cve_count":17,"kev_count":17,"has_kev":18},{"version":88,"cve_count":17,"kev_count":17,"has_kev":18},{"version":90,"cve_count":17,"kev_count":17,"has_kev":18},{"version":92,"cve_count":17,"kev_count":17,"has_kev":18},{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},{"version":98,"cve_count":17,"kev_count":17,"has_kev":18},{"version":100,"cve_count":17,"kev_count":17,"has_kev":18},{"version":102,"cve_count":17,"kev_count":17,"has_kev":18},{"version":104,"cve_count":17,"kev_count":17,"has_kev":18},{"version":106,"cve_count":17,"kev_count":17,"has_kev":18},{"version":108,"cve_count":17,"kev_count":17,"has_kev":18},{"version":110,"cve_count":17,"kev_count":17,"has_kev":18},{"version":112,"cve_count":52,"kev_count":17,"has_kev":18},{"version":114,"cve_count":17,"kev_count":17,"has_kev":18},{"version":116,"cve_count":117,"kev_count":17,"has_kev":18},{"version":119,"cve_count":16,"kev_count":17,"has_kev":18},{"version":121,"cve_count":17,"kev_count":17,"has_kev":18},{"version":123,"cve_count":17,"kev_count":17,"has_kev":18},{"version":125,"cve_count":17,"kev_count":17,"has_kev":18},{"version":127,"cve_count":17,"kev_count":17,"has_kev":18},{"version":129,"cve_count":17,"kev_count":17,"has_kev":18},{"version":131,"cve_count":17,"kev_count":17,"has_kev":18},{"version":133,"cve_count":17,"kev_count":17,"has_kev":18},{"version":135,"cve_count":17,"kev_count":17,"has_kev":18},{"version":137,"cve_count":117,"kev_count":17,"has_kev":18},{"version":139,"cve_count":17,"kev_count":17,"has_kev":18},{"version":141,"cve_count":17,"kev_count":17,"has_kev":18},{"version":143,"cve_count":17,"kev_count":17,"has_kev":18},{"version":145,"cve_count":52,"kev_count":17,"has_kev":18},{"version":147,"cve_count":17,"kev_count":17,"has_kev":18},{"version":149,"cve_count":17,"kev_count":17,"has_kev":18},{"version":151,"cve_count":17,"kev_count":17,"has_kev":18},{"version":153,"cve_count":17,"kev_count":17,"has_kev":18},{"version":155,"cve_count":17,"kev_count":17,"has_kev":18},{"version":157,"cve_count":17,"kev_count":17,"has_kev":18},{"version":159,"cve_count":17,"kev_count":17,"has_kev":18},{"version":161,"cve_count":52,"kev_count":17,"has_kev":18},{"version":163,"cve_count":17,"kev_count":17,"has_kev":18},{"version":165,"cve_count":52,"kev_count":17,"has_kev":18},{"version":167,"cve_count":52,"kev_count":17,"has_kev":18},{"version":169,"cve_count":16,"kev_count":17,"has_kev":18},{"version":171,"cve_count":52,"kev_count":17,"has_kev":18},{"version":173,"cve_count":17,"kev_count":17,"has_kev":18},{"version":175,"cve_count":17,"kev_count":17,"has_kev":18},{"version":177,"cve_count":17,"kev_count":17,"has_kev":18},{"version":179,"cve_count":17,"kev_count":17,"has_kev":18},{"version":181,"cve_count":17,"kev_count":17,"has_kev":18},{"version":183,"cve_count":17,"kev_count":17,"has_kev":18},{"version":185,"cve_count":17,"kev_count":17,"has_kev":18},{"version":187,"cve_count":16,"kev_count":17,"has_kev":18},{"version":189,"cve_count":16,"kev_count":17,"has_kev":18},{"version":191,"cve_count":52,"kev_count":17,"has_kev":18},{"version":193,"cve_count":52,"kev_count":17,"has_kev":18},{"version":195,"cve_count":117,"kev_count":17,"has_kev":18},{"version":197,"cve_count":17,"kev_count":17,"has_kev":18},{"version":199,"cve_count":17,"kev_count":17,"has_kev":18},{"version":201,"cve_count":17,"kev_count":17,"has_kev":18},{"version":203,"cve_count":17,"kev_count":17,"has_kev":18},{"version":205,"cve_count":17,"kev_count":17,"has_kev":18},{"version":207,"cve_count":17,"kev_count":17,"has_kev":18},{"version":209,"cve_count":17,"kev_count":17,"has_kev":18},{"version":211,"cve_count":17,"kev_count":17,"has_kev":18},{"version":213,"cve_count":17,"kev_count":17,"has_kev":18},{"version":215,"cve_count":17,"kev_count":17,"has_kev":18},{"version":217,"cve_count":17,"kev_count":17,"has_kev":18},{"version":219,"cve_count":17,"kev_count":17,"has_kev":18},{"version":221,"cve_count":222,"kev_count":17,"has_kev":18},{"version":224,"cve_count":17,"kev_count":17,"has_kev":18},{"version":226,"cve_count":227,"kev_count":16,"has_kev":4},{"version":229,"cve_count":17,"kev_count":17,"has_kev":18},{"version":231,"cve_count":17,"kev_count":17,"has_kev":18},{"version":233,"cve_count":17,"kev_count":17,"has_kev":18},{"version":235,"cve_count":17,"kev_count":17,"has_kev":18},{"version":237,"cve_count":17,"kev_count":17,"has_kev":18},{"version":239,"cve_count":17,"kev_count":17,"has_kev":18},{"version":241,"cve_count":17,"kev_count":17,"has_kev":18},{"version":243,"cve_count":17,"kev_count":17,"has_kev":18},{"version":245,"cve_count":17,"kev_count":17,"has_kev":18},{"version":247,"cve_count":17,"kev_count":17,"has_kev":18},{"version":249,"cve_count":52,"kev_count":17,"has_kev":18},{"version":251,"cve_count":17,"kev_count":17,"has_kev":18},{"version":253,"cve_count":17,"kev_count":17,"has_kev":18},{"version":255,"cve_count":17,"kev_count":17,"has_kev":18},{"version":257,"cve_count":17,"kev_count":17,"has_kev":18},{"version":259,"cve_count":17,"kev_count":17,"has_kev":18},[382,390,396,401,406,410,414,419,424,429],{"cveId":383,"description":384,"publishedDate":385,"cvssScore":386,"cvssVersion":387,"severity":388,"isKev":4,"epssScore":389},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","2023-10-10",7.5,"v3.1","High",0.99999,{"cveId":391,"description":392,"publishedDate":393,"cvssScore":394,"cvssVersion":387,"severity":395,"isKev":4,"epssScore":389},"CVE-2020-5902","In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.","2020-07-01",9.8,"Critical",{"cveId":397,"description":398,"publishedDate":399,"cvssScore":394,"cvssVersion":387,"severity":395,"isKev":4,"epssScore":400},"CVE-2021-22986","On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd BIG-IQ 7.1.0.x before 7.1.0.3 and 7.0.0.x before 7.0.0.2, the iControl REST interface has an unauthenticated remote command execution vulnerability. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.","2021-03-31",0.99898,{"cveId":402,"description":403,"publishedDate":404,"cvssScore":394,"cvssVersion":387,"severity":395,"isKev":4,"epssScore":405},"CVE-2023-46747","Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and\u002For self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated","2023-10-26",0.96515,{"cveId":407,"description":408,"publishedDate":399,"cvssScore":394,"cvssVersion":387,"severity":395,"isKev":18,"epssScore":409},"CVE-2021-22992","On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, a malicious HTTP response to an Advanced WAF\u002FBIG-IP ASM virtual server with Login Page configured in its policy may trigger a buffer overflow, resulting in a DoS attack. In certain situations, it may allow remote code execution (RCE), leading to complete system compromise. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.",0.72711,{"cveId":411,"description":412,"publishedDate":399,"cvssScore":394,"cvssVersion":387,"severity":395,"isKev":4,"epssScore":413},"CVE-2021-22991","On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, undisclosed requests to a virtual server may be incorrectly handled by the Traffic Management Microkernel (TMM) URI normalization, which may trigger a buffer overflow, resulting in a DoS attack. In certain situations, it may theoretically allow bypass of URL based access control or remote code execution (RCE). Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.",0.61064,{"cveId":415,"description":416,"publishedDate":417,"cvssScore":386,"cvssVersion":387,"severity":388,"isKev":18,"epssScore":418},"CVE-2002-20001","The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE.","2021-11-11",0.24639,{"cveId":420,"description":421,"publishedDate":399,"cvssScore":422,"cvssVersion":387,"severity":395,"isKev":18,"epssScore":423},"CVE-2021-22987","On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3 when running in Appliance mode, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has an authenticated remote command execution vulnerability in undisclosed pages. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.",9.9,0.13672,{"cveId":425,"description":426,"publishedDate":399,"cvssScore":427,"cvssVersion":387,"severity":388,"isKev":18,"epssScore":428},"CVE-2021-22988","On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, TMUI, also referred to as the Configuration utility, has an authenticated remote command execution vulnerability in undisclosed pages. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.",8.8,0.10444,{"cveId":430,"description":431,"publishedDate":399,"cvssScore":432,"cvssVersion":387,"severity":395,"isKev":18,"epssScore":433},"CVE-2021-22989","On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, when running in Appliance mode with Advanced WAF or BIG-IP ASM provisioned, the TMUI, also referred to as the Configuration utility, has an authenticated remote command execution vulnerability in undisclosed pages. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.",9.1,0.08838,[435,440,446,450,455,459],{"cveId":402,"description":403,"publishedDate":404,"cvssScore":394,"severity":395,"isKev":4,"epssScore":405,"cisaVulnName":436,"cisaDateAdded":437,"cisaShortDescription":438,"cisaRequiredAction":439},"F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability","2023-10-31","F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due to undisclosed requests that may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and\u002For self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46748.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":441,"description":442,"publishedDate":404,"cvssScore":427,"severity":388,"isKev":4,"epssScore":443,"cisaVulnName":444,"cisaDateAdded":437,"cisaShortDescription":445,"cisaRequiredAction":439},"CVE-2023-46748","An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which \n\nmay allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and\u002For self IP addresses to execute arbitrary system commands.\n\n Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated",0.04468,"F5 BIG-IP Configuration Utility SQL Injection Vulnerability","F5 BIG-IP Configuration utility contains an SQL injection vulnerability that may allow an authenticated attacker with network access through the BIG-IP management port and\u002For self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46747.",{"cveId":383,"description":384,"publishedDate":385,"cvssScore":386,"severity":388,"isKev":4,"epssScore":389,"cisaVulnName":447,"cisaDateAdded":385,"cisaShortDescription":448,"cisaRequiredAction":449},"HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":411,"description":412,"publishedDate":399,"cvssScore":394,"severity":395,"isKev":4,"epssScore":413,"cisaVulnName":451,"cisaDateAdded":452,"cisaShortDescription":453,"cisaRequiredAction":454},"F5 BIG-IP Traffic Management Microkernel Buffer Overflow","2022-01-18","The Traffic Management Microkernel of BIG-IP ASM Risk Engine has a buffer overflow vulnerability, leading to a bypassing of URL-based access controls.","Apply updates per vendor instructions.",{"cveId":391,"description":392,"publishedDate":393,"cvssScore":394,"severity":395,"isKev":4,"epssScore":389,"cisaVulnName":456,"cisaDateAdded":457,"cisaShortDescription":458,"cisaRequiredAction":454},"F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability","2021-11-03","F5 BIG-IP Traffic Management User Interface (TMUI) contains a remote code execution vulnerability in undisclosed pages.",{"cveId":397,"description":398,"publishedDate":399,"cvssScore":394,"severity":395,"isKev":4,"epssScore":400,"cisaVulnName":460,"cisaDateAdded":457,"cisaShortDescription":461,"cisaRequiredAction":454},"F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability","F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services.",{"title":463,"metaDescription":464,"keywords":465,"structuredData":466},"Big-ip Advanced Web Application Firewall by F5 - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Big-ip Advanced Web Application Firewall by F5 covering 119 versions with 116 tracked vulnerabilities including 4 critical and 2 high-severity issues and 6 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Big-ip Advanced Web Application Firewall vulnerabilities, Big-ip Advanced Web Application Firewall security, Big-ip Advanced Web Application Firewall CVE, F5 Big-ip Advanced Web Application Firewall, Big-ip Advanced Web Application Firewall threat intelligence, F5 security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Big-ip Advanced Web Application Firewall KEV, Big-ip Advanced Web Application Firewall exploited vulnerabilities",{"@context":467,"@type":468,"name":469,"description":464,"url":470,"manufacturer":471,"applicationCategory":475,"softwareVersion":476,"mainEntity":477},"https:\u002F\u002Fschema.org","SoftwareApplication","Big-ip Advanced Web Application Firewall","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ff5\u002Fbig-ip_advanced_web_application_firewall",{"@type":472,"name":473,"url":474},"Organization","F5","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ff5","Security Software","119 versions tracked",{"@type":478,"name":479,"description":480,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Big-ip Advanced Web Application Firewall Security Vulnerabilities","Security vulnerabilities affecting Big-ip Advanced Web Application Firewall by F5",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":482,"apiVersion":483},"2026-10-17T13:31:41.821Z","3.0",[],{"rows":486,"total":11,"capped":18,"failed":17},[487,496,500,504,513,523],{"cveId":402,"name":436,"severity":395,"cvss":394,"added":437,"epss":405,"published":488,"ranges":489,"checked":4,"hits":495,"covers":18},"2023-10-26T21:15:08.097",[490,491,492,493,494],"13.1.0 to 13.1.5","14.1.0 to 14.1.5","15.1.0 to 15.1.10","16.1.0 to 16.1.4","17.1.0 to 17.1.1",[],{"cveId":441,"name":444,"severity":388,"cvss":427,"added":437,"epss":443,"published":497,"ranges":498,"checked":4,"hits":499,"covers":18},"2023-10-26T21:15:08.177",[490,491,492,493,494],[],{"cveId":383,"name":447,"severity":388,"cvss":386,"added":385,"epss":389,"published":501,"ranges":502,"checked":4,"hits":503,"covers":18},"2023-10-10T14:15:10.883",[490,491,492,493,226],[],{"cveId":411,"name":451,"severity":395,"cvss":394,"added":452,"epss":413,"published":505,"ranges":506,"checked":4,"hits":512,"covers":18},"2021-03-31T18:15:14.787",[507,508,509,510,511],"12.1.0 to before 12.1.5.3","13.1.0 to before 13.1.3.6","14.1.0 to before 14.1.4","15.1.0 to before 15.1.2.1","16.0.0 to before 16.0.1.1",[],{"cveId":391,"name":456,"severity":395,"cvss":394,"added":457,"epss":389,"published":514,"ranges":515,"checked":4,"hits":522,"covers":18},"2020-07-01T15:15:15.36",[516,517,518,519,520,521],"11.6.1 to before 11.6.5.2","12.1.0 to before 12.1.5.2","13.1.0 to before 13.1.3.4","14.1.0 to before 14.1.2.6","15.0.0 to before 15.0.1.4","15.1.0 to before 15.1.0.4",[],{"cveId":397,"name":460,"severity":395,"cvss":394,"added":457,"epss":400,"published":524,"ranges":525,"checked":4,"hits":526,"covers":18},"2021-03-31T15:15:15.153",[507,508,509,510,511],[]]