Vulnerabilities in F5
432 resultsCVE-2022-27878MEDIUMOn all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP, and F5 BIG-IP Guided Configuration (GC) all versions priEPSS 0.8%CVE-2022-33203HIGHBIG-IP APM and F5 SSL Orchestrator vulnerability CVE-2022-33203EPSS 0.8%CVE-2022-35245HIGHBIG-IP APM access policy vulnerability CVE-2022-35245EPSS 0.8%CVE-2022-34655HIGHTMM vulnerability CVE-2022-34655EPSS 0.8%CVE-2022-35240HIGHBIG-IP Message Routing MQTT vulnerability CVE-2022-35240EPSS 0.8%CVE-2022-35236HIGHHTTP2 profile vulnerability CVE-2022-35236EPSS 0.8%CVE-2022-34651HIGHBIG-IP TLS 1.3 iRule vulnerability CVE-2022-34651EPSS 0.8%CVE-2022-28859MEDIUMOn F5 BIG-IP 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6, when installing Net HSM, the scripts (nethsm-safenet-iEPSS 0.8%CVE-2022-25990MEDIUMOn 1.0.x versions prior to 1.0.1, systems running F5OS-A software may expose certain registry ports externally. Note: Software versions whicEPSS 0.8%CVE-2022-28716HIGHOn 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5,EPSS 0.8%CVE-2025-23239HIGHBIG-IP iControl REST vulnerabilityEPSS 0.8%CVE-2026-78689CRITICALNGINX ngx_http_js_module vulnerablilityEPSS 0.8%CVE-2022-34851MEDIUMBIG-IP and BIG-IQ iControl SOAP vulnerability CVE-2022-34851EPSS 0.8%CVE-2022-35241MEDIUMNGINX Instance Manager vulnerability CVE-2022-35241EPSS 0.8%CVE-2022-41832HIGHBIG-IP SIP vulnerability CVE-2022-41832EPSS 0.7%CVE-2022-41836HIGHBIG-IP Advanced WAF and ASM bd vulnerability CVE-2022-41836EPSS 0.7%CVE-2022-41691HIGHBIG-IP Advanced WAF/ASM bd vulnerability CVE-2022-41691EPSS 0.7%CVE-2022-41833HIGHBIG-IP iRule vulnerability CVE-2022-41833EPSS 0.7%CVE-2022-41806HIGHBIG-IP AFM NAT64 Policy Vulnerability CVE-2022-41806EPSS 0.7%CVE-2022-41787HIGHBIG-IP DNS Express vulnerability CVE-2022-41787EPSS 0.7%