Browse CVEs

CRITICAL 9.8 CVE-2025-53521 KEV When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE).   Note: Softw… Big Ip Access Policy Manager 15.1.10.8 / 16.1.6.1+ Fix from $2,3002025-10-15 CRITICAL 9.8 CVE-2023-46747 KEVEPSS 97% Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the manag… Big Ip Access Policy Manager after 17.1.1 Fix from $2,3002023-10-26 HIGH 8.8 CVE-2023-46748 KEV An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with network acce… Big Ip Access Policy Manager after 17.1.1 Fix from $1,9502023-10-26 CRITICAL 9.8 CVE-2022-1388 KEVEPSS 100% On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5… Big Ip Access Policy Manager 13.1.5 / 14.1.4.6+ Fix from $2,3002022-05-05 CRITICAL 9.8 CVE-2021-22991 KEVEPSS 61% On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, undisclo… Big Ip Access Policy Manager 12.1.5.3 / 13.1.3.6+ Fix from $2,3002021-03-31 CRITICAL 9.8 CVE-2021-22986 KEVEPSS 100% On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd BIG-I… Big Ip Access Policy Manager 12.1.5.3 / 13.1.3.6+ Fix from $2,3002021-03-31 CRITICAL 9.8 CVE-2020-5902 KEVEPSS 100% In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TM… Big Ip Access Policy Manager 11.6.5.2 / 12.1.5.2+ Fix from $2,3002020-07-01