Vulnerabilities in F5
432 resultsCVE-2022-1388CRITICALOn F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior EPSS 100.0%KEVCVE-2023-46747CRITICALBIG-IP Configuration utility unauthenticated remote code execution vulnerabilityEPSS 96.7%KEVCVE-2022-41622HIGHiControl SOAP vulnerabilityEPSS 92.4%CVE-2022-41800HIGHAppliance mode iControl REST vulnerabilityEPSS 76.9%CVE-2023-22374HIGHiControl SOAP vulnerabilityEPSS 70.8%CVE-2026-42945CRITICALNGINX ngx_http_rewrite_module vulnerabilityEPSS 68.0%CVE-2026-94127CRITICALBIG-IP APM OAuth vulnerabilityEPSS 26.6%KEVCVE-2026-27654HIGHNGINX ngx_http_dav_module vulnerabilityEPSS 25.9%CVE-2025-31644HIGHAppliance mode BIG-IP iControl REST and tmsh vulnerabilityEPSS 24.3%CVE-2026-9256CRITICALNGINX ngx_http_rewrite_module vulnerabilityEPSS 10.9%CVE-2024-45844HIGHBIG-IP monitors vulnerabilityEPSS 10.6%CVE-2026-8711CRITICALNGINX JavaScript vulnerabilityEPSS 9.7%CVE-2024-26026HIGHBIG-IP Central Manager SQL InjectionEPSS 7.2%CVE-2025-20029HIGHBIG-IP iControl REST and tmsh vulnerabilityEPSS 7.1%CVE-2024-21793HIGHBIG-IP Central Manager OData Injection VulnerabilityEPSS 7.1%CVE-2026-42055CRITICALNGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerabilityEPSS 6.5%CVE-2026-42533CRITICALNGINX Map directive and Regex matching vulnerabilityEPSS 6.3%CVE-2026-42530CRITICALNGINX Open-Source ngx_http_v3_module vulnerabilityEPSS 6.2%CVE-2023-46748HIGHBIG-IP Configuration utility authenticated SQL injection vulnerabilityEPSS 4.3%KEVCVE-2025-23419MEDIUMTLS Session Resumption VulnerabilityEPSS 2.8%