F5 BIG-IP
productDEcpe:/a:f5:big-ip:-
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
70critical274high588medium28low
updated 2026-10-27
01
vulnerabilities (1,309)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2026-109618US | critical9.8OT critical | KEV |
| CVE-2021-40438US | critical9.0OT critical | KEV |
| CVE-2026-109619US | high8.1OT critical | KEV |
| CVE-2024-38475US | critical9.1OT critical | KEV |
| CVE-2020-11023US | medium6.1OT critical | KEV |
| CVE-2016-3427US | critical9.8OT critical | KEV |
| CVE-2025-53521US | —OT critical | KEV |
| CVE-2020-11022US | medium6.1 | Exploit |
| CVE-2016-2183US | high7.5OT high | Exploit |
| CVE-2020-8617US | medium5.9 | Exploit |
| CVE-2019-11358US | medium6.1 | Exploit |
| CVE-2016-0800US | medium5.9 | Exploit |
| CVE-2024-38472US | — | Exploit |
| CVE-2016-6515US | high7.5 | Exploit |
| CVE-2015-1793US | medium6.5 | Exploit |
| CVE-2019-6111US | medium5.9 | Exploit |
| CVE-2020-8277US | high7.5 | Exploit |
| CVE-2015-6834US | critical9.8 | Exploit |
| CVE-2024-38476US | critical9.8 | Exploit |
| CVE-2016-6816US | high7.1 | Exploit |
| CVE-2015-6835US | critical9.8 | Exploit |
| CVE-2015-4870US | medium4.0 | Exploit |
| CVE-2015-9251US | medium6.1 | Exploit |
| CVE-2024-38473US | — | Exploit |
| CVE-2019-6110US | medium6.8 | Exploit |
| CVE-2002-20001US | high7.5 | Exploit |
| CVE-2020-17527US | high7.5 | Exploit |
| CVE-2021-23337US | high7.2 | Exploit |
| CVE-2022-26377US | high7.5 | Exploit |
| CVE-2019-5737US | high7.5 | Exploit |
| CVE-2020-15778US | high7.4 | Exploit |
| CVE-2021-33909US | high7.8 | Exploit |
| CVE-2016-1839US | medium5.5 | Exploit |
| CVE-2025-20029US | — | Exploit |
| CVE-2016-1838US | medium5.5 | Exploit |
| CVE-2020-25705US | high7.4OT elevated | Exploit |
| CVE-2020-14364US | medium5.0 | Exploit |
| CVE-2024-0760US | — | Exploit |
| CVE-2018-14040US | medium6.1 | Exploit |
| CVE-2018-14042US | medium6.1 | Exploit |
| CVE-2023-38709US | — | Exploit |
| CVE-2022-45047US | critical9.8 | Exploit |
| CVE-2006-20001US | high7.5 | Exploit |
| CVE-2022-31813US | critical9.8OT high | Exploit |
| CVE-2017-18344US | medium5.5 | Exploit |
| CVE-2018-5407US | medium4.7 | Exploit |
| CVE-2022-31160US | medium6.1 | Exploit |
| CVE-2022-46364US | critical9.8 | Exploit |
| CVE-2024-6232US | high7.5 | Exploit |
| CVE-2024-28757US | high7.5 | Exploit |
showing 50 of 1,309
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-20Improper Input Validation158 CVEs
- CWE-476NULL Pointer Dereference132 CVEs
- CWE-125Out-of-bounds Read106 CVEs
- CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer99 CVEs
- CWE-416Use After Free86 CVEs
- CWE-400Uncontrolled Resource Consumption70 CVEs
- CWE-787Out-of-bounds Write64 CVEs
- CWE-401Missing Release of Memory after Effective Lifetime55 CVEs
03
sources (1)
Which sources assert this record, and when.
- DECERT-Bund (BSI CSAF)1,309 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan