How many f5 big-ip access policy manager CVEs are in CISA KEV?

Yes — 12 of f5 big-ip access policy manager's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of f5 big-ip access policy manager are affected?

558 distinct f5 big-ip access policy manager versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in f5 big-ip access policy manager CVEs?

f5 big-ip access policy manager's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-476 (NULL Pointer Dereference), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-20 (Improper Input Validation).

How many critical f5 big-ip access policy manager vulnerabilities are there?

f5 big-ip access policy manager has 44 critical and 358 high-severity CVEs.

What is the average severity of f5 big-ip access policy manager CVEs?

The average CVSS base score across f5 big-ip access policy manager's scored CVEs is 7.1.

f5 big-ip access policy manager Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: f5 big-ip access policy manager vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

f5 big-ip access policy manager Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

f5 big-ip access policy manager has 628 published CVE records since 2012, of which 12 are in CISA's Known Exploited Vulnerabilities catalog and 31 have a known public exploit. The average CVSS base score across scored CVEs is 7.1.

This page aggregates every publicly disclosed vulnerability (CVE) affecting f5 big-ip access policy manager, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include big-ip 2000, big-ip 2800, big-ip 4000, big-ip i10600, big-ip i10800, big-ip i11600.

Severity and exploitation

How the CVSS severity of f5 big-ip access policy manager's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical44

High358

Medium218

Low8

In CISA’s Known Exploited Vulnerabilities catalog

12 of f5 big-ip access policy manager's CVEs are confirmed exploited in the wild.

Public exploits

31 of f5 big-ip access policy manager's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every f5 big-ip access policy manager version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

17.5.0 <= v <= 17.5.147 CVEs
12.1.0 <= v <= 12.1.546 CVEs
13.1.0 <= v <= 13.1.544 CVEs
12.1.0 <= v <= 12.1.043 CVEs
11.6.0 <= v <= 11.6.042 CVEs
12.1.1 <= v <= 12.1.142 CVEs
11.2.1 <= v <= 11.2.140 CVEs
16.1.0 <= v <= 16.1.640 CVEs
11.5.1 <= v <= 11.5.139 CVEs
11.6.1 <= v <= 11.6.138 CVEs
12.0.0 <= v <= 12.0.038 CVEs

Common weakness types

The CWE weakness categories most often found in f5 big-ip access policy manager CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many f5 big-ip access policy manager CVEs were published each year.

2015

2016

2017

2018

2019

2020

2021

Other f5 products

Browse vulnerabilities for other products by f5.

big-ip application security manager580 CVEs big-ip advanced firewall manager551 CVEs big-ip local traffic manager540 CVEs big-ip policy enforcement manager532 CVEs big-ip link controller524 CVEs big-ip application acceleration manager523 CVEs big-ip analytics510 CVEs

Frequently asked questions

Common questions about f5 big-ip access policy manager vulnerabilities.

How many CVEs does f5 big-ip access policy manager have?: f5 big-ip access policy manager has 628 published CVE records since 2012.
How many f5 big-ip access policy manager CVEs are in CISA KEV?: Yes — 12 of f5 big-ip access policy manager's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for f5 big-ip access policy manager vulnerabilities?: Yes — 31 of f5 big-ip access policy manager's CVEs have a known public exploit.
Which versions of f5 big-ip access policy manager are affected?: 558 distinct f5 big-ip access policy manager versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in f5 big-ip access policy manager CVEs?: f5 big-ip access policy manager's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-476 (NULL Pointer Dereference), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-20 (Improper Input Validation).
How many critical f5 big-ip access policy manager vulnerabilities are there?: f5 big-ip access policy manager has 44 critical and 358 high-severity CVEs.
What is the average severity of f5 big-ip access policy manager CVEs?: The average CVSS base score across f5 big-ip access policy manager's scored CVEs is 7.1.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track f5 big-ip access policy manager vulnerabilities

Monitor new f5 big-ip access policy manager vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

f5 big-ip access policy manager Vulnerabilities