How many F5 Networks, Inc. BIG-IP CVEs are in CISA KEV?

Yes — 1 of F5 Networks, Inc. BIG-IP's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for F5 Networks, Inc. BIG-IP vulnerabilities?

Yes — 1 of F5 Networks, Inc. BIG-IP's CVEs have a known public exploit.

Which versions of F5 Networks, Inc. BIG-IP are affected?

5 distinct F5 Networks, Inc. BIG-IP versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in F5 Networks, Inc. BIG-IP CVEs?

F5 Networks, Inc. BIG-IP's CVEs most often map to these CWE weakness types: CWE-918 (Server-Side Request Forgery (SSRF)).

How many critical F5 Networks, Inc. BIG-IP vulnerabilities are there?

F5 Networks, Inc. BIG-IP has 1 critical and 5 high-severity CVEs.

What is the average severity of F5 Networks, Inc. BIG-IP CVEs?

The average CVSS base score across F5 Networks, Inc. BIG-IP's scored CVEs is 8.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

F5 Networks, Inc.

6 CVEs

1 in CISA KEV

F5 Networks, Inc. BIG-IP Vulnerabilities

Name: F5 Networks, Inc. BIG-IP vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for BIG-IP by F5 Networks, Inc..

6

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

1

Public exploits

PoC or exploit code

8.0

Avg CVSS

2017–2021

Last updated March 31, 2021

Overview

F5 Networks, Inc. BIG-IP has 6 published CVE records since 2017, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 8.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting F5 Networks, Inc. BIG-IP, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of F5 Networks, Inc. BIG-IP's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High5

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

1

One of F5 Networks, Inc. BIG-IP's CVEs is confirmed exploited in the wild.

Public exploits

1

One of F5 Networks, Inc. BIG-IP's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every F5 Networks, Inc. BIG-IP version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

11.2.11 CVE
11.4.0-11.6.11 CVE
12.0.0-12.1.21 CVE

Version ranges

>= 12.1.0-12.1.22 CVEs
>= 12.0.0 - 12.1.21 CVE

Find a version

6 CVEs

Sort

Critical vulnerability · 2021-03-31
CVE-2021-22986
CISA KEV
Public exploit
Patch
CWE-918
Added to CISA KEV 2021-11-03
Critical · CVSS 9.3
EPSS 99.9% (100th pct)2021-03-31
High vulnerability · 2018-10-08
CVE-2016-7475
High · CVSS 7.5
EPSS 1.3% (68th pct)2018-10-08
High vulnerability · 2017-05-10
CVE-2016-9250
High · CVSS 7.5
EPSS 0.9% (56th pct)2017-05-10
High vulnerability · 2017-05-09
CVE-2016-9256
High · CVSS 7.5
EPSS 1.0% (60th pct)2017-05-09
High vulnerability · 2017-05-09
CVE-2016-9253
High · CVSS 7.5
EPSS 1.3% (68th pct)2017-05-09
High vulnerability · 2017-05-09
CVE-2016-9251
High · CVSS 8.8
EPSS 1.5% (72th pct)2017-05-09

Common weakness types

The CWE weakness categories most often found in F5 Networks, Inc. BIG-IP CVEs. Follow any weakness for its full explanation.

CWE-918Server-Side Request Forgery (SSRF)1 CVE

Disclosure activity by year

How many F5 Networks, Inc. BIG-IP CVEs were published each year.

2017

4

2018

1

2021

1

Other F5 Networks, Inc. products

Browse vulnerabilities for other products by F5 Networks, Inc..

BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator)25 CVEs BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe)17 CVEs BIG-IP (APM)11 CVEs BIG-IP APM8 CVEs BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, WebSafe7 CVEs BIG-IP AFM4 CVEs BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe4 CVEs Enterprise Manager4 CVEs

All F5 Networks, Inc. vulnerabilities

Frequently asked questions

Common questions about F5 Networks, Inc. BIG-IP vulnerabilities.

How many CVEs does F5 Networks, Inc. BIG-IP have?: F5 Networks, Inc. BIG-IP has 6 published CVE records since 2017.
How many F5 Networks, Inc. BIG-IP CVEs are in CISA KEV?: Yes — 1 of F5 Networks, Inc. BIG-IP's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for F5 Networks, Inc. BIG-IP vulnerabilities?: Yes — 1 of F5 Networks, Inc. BIG-IP's CVEs have a known public exploit.
Which versions of F5 Networks, Inc. BIG-IP are affected?: 5 distinct F5 Networks, Inc. BIG-IP versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in F5 Networks, Inc. BIG-IP CVEs?: F5 Networks, Inc. BIG-IP's CVEs most often map to these CWE weakness types: CWE-918 (Server-Side Request Forgery (SSRF)).
How many critical F5 Networks, Inc. BIG-IP vulnerabilities are there?: F5 Networks, Inc. BIG-IP has 1 critical and 5 high-severity CVEs.
What is the average severity of F5 Networks, Inc. BIG-IP CVEs?: The average CVSS base score across F5 Networks, Inc. BIG-IP's scored CVEs is 8.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track F5 Networks, Inc. BIG-IP vulnerabilities

Monitor new F5 Networks, Inc. BIG-IP vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing