CVE security advisories and vulnerability history for BIG-IP by f5.
Last updated
f5 BIG-IP has 260 published CVE records since 2008, of which 6 are in CISA's Known Exploited Vulnerabilities catalog and 13 have a known public exploit. The average CVSS base score across scored CVEs is 7.4.
This page aggregates every publicly disclosed vulnerability (CVE) affecting f5 BIG-IP, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include BX110 blades on VELOS, BX520 blades on VELOS, Multi-blade VIPRION, r10000 rSeries, r12000 rSeries, r2000.
How the CVSS severity of f5 BIG-IP's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
34 additional CVEs have no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
6
6 of f5 BIG-IP's CVEs are confirmed exploited in the wild.
Public exploits
13
13 of f5 BIG-IP's CVEs have a known public exploit available.
Browse every f5 BIG-IP version named in a CVE, then pick one to see only the CVEs that affect it.
260 CVEs
Showing 30 of 260
The CWE weakness categories most often found in f5 BIG-IP CVEs. Follow any weakness for its full explanation.
How many f5 BIG-IP CVEs were published each year.
Browse vulnerabilities for other products by f5.
Common questions about f5 BIG-IP vulnerabilities.
f5 BIG-IP has 260 published CVE records since 2008.
Yes — 6 of f5 BIG-IP's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Yes — 13 of f5 BIG-IP's CVEs have a known public exploit.
148 distinct f5 BIG-IP versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
f5 BIG-IP's CVEs most often map to these CWE weakness types: CWE-476 (NULL Pointer Dereference), CWE-400 (Uncontrolled Resource Consumption), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
f5 BIG-IP has 7 critical and 154 high-severity CVEs.
The average CVSS base score across f5 BIG-IP's scored CVEs is 7.4.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new f5 BIG-IP vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
