F5 Big-Ip vulnerabilities
262 known vulnerabilities affecting f5/big-ip.
Total CVEs
262
CISA KEV
5
actively exploited
Public exploits
8
Exploited in wild
6
Severity breakdown
CRITICAL10HIGH159MEDIUM88LOW5
Vulnerabilities
Page 14 of 14
CVE-2026-63020P4LOWCVSS 3.1≥ 21.1.0, < 21.1.0.1≥ 21.0.0, < 21.0.0.3+2 more2026-09-02
CVE-2026-63020 [LOW] CWE-451 CVE-2026-63020: A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacke
A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages
Impact:
An attacker may trick authenticated BIG-IP users
into accessing malicious links and reflect a spoofed error message in
the victim's BIG-IP Configuration utility web browser session. This is a
control plane issue; the
nvd
CVE-2025-23415P4LOWCVSS 3.1≥ 17.1.0, < 17.1.2≥ 16.1.0, < 16.1.5+1 more2025-02-05
CVE-2025-23415 [LOW] CWE-345 CVE-2025-23415: An insufficient verification of data authenticity vulnerability exists in BIG-IP APM Access Policy e
An insufficient verification of data authenticity vulnerability exists in BIG-IP APM Access Policy endpoint inspection that may allow an attacker to bypass endpoint inspection checks for VPN connection initiated thru BIG-IP APM browser network access VPN client for Windows, macOS and Linux.
Note: Software versions which have reached End of Technica
nvd
← Previous14 / 14