F5 ARX

productDE

cpe:/a:f5:arx:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

17critical21high9medium1low

updated 2026-10-28

vulnerabilities (48)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-3427US	critical9.8OT critical	92.3% (100th)	KEV	no fix	2016-04-21	—
CVE-2016-2183US	high7.5OT high	94.7% (100th)	Exploit	no fix	2016-09-01	—
CVE-2016-8610US	high7.5	39.7% (99th)	Exploit	no fix	2017-11-13	—
CVE-2016-6816US	high7.1	39.6% (99th)	Exploit	no fix	2017-03-20	—
CVE-2016-6304US	high7.5	63.0% (99th)	—	no fix	2016-09-26	—
CVE-2016-2177US	critical9.8	44.5% (99th)	—	no fix	2016-06-20	—
CVE-2016-2182US	critical9.8	44.2% (99th)	—	no fix	2016-09-16	—
CVE-2016-6306US	medium5.9	41.7% (99th)	—	no fix	2016-09-26	—
CVE-2016-6303US	critical9.8	32.0% (98th)	—	no fix	2016-09-16	—
CVE-2016-2180US	high7.5	30.0% (98th)	—	no fix	2016-08-01	—
CVE-2016-6302US	high7.5	27.8% (98th)	—	no fix	2016-09-16	—
CVE-2016-2179US	high7.5	26.6% (98th)	—	no fix	2016-09-16	—
CVE-2016-2181US	high7.5	22.6% (98th)	—	no fix	2016-09-16	—
CVE-2016-6305US	high7.5	16.0% (97th)	—	no fix	2016-09-26	—
CVE-2016-6307US	medium5.9	13.8% (97th)	—	no fix	2016-09-26	—
CVE-2016-6308US	medium5.9	12.2% (96th)	—	no fix	2016-09-26	—
CVE-2015-8386US	critical9.8	6.87% (94th)	—	no fix	2015-12-02	—
CVE-2015-8388US	high7.5	6.59% (94th)	—	no fix	2015-12-02	—
CVE-2015-8391US	critical9.8	6.40% (94th)	—	no fix	2015-12-02	—
CVE-2015-8779US	critical9.8	6.21% (93rd)	—	no fix	2016-04-19	—
CVE-2015-8383US	critical9.8	6.08% (93rd)	—	no fix	2015-12-02	—
CVE-2015-8778US	critical9.8	5.74% (93rd)	—	no fix	2016-04-19	—
CVE-2015-8385US	high7.5	5.62% (93rd)	—	no fix	2015-12-02	—
CVE-2014-9761US	critical9.8	5.51% (93rd)	—	no fix	2016-04-19	—
CVE-2016-3443US	critical9.6	5.48% (93rd)	—	no fix	2016-04-21	—
CVE-2015-8381US	high7.5	5.29% (93rd)	—	no fix	2015-12-02	—
CVE-2015-2328US	high7.5	5.24% (92nd)	—	no fix	2015-12-02	—
CVE-2015-8394US	critical9.8	4.81% (92nd)	—	no fix	2015-12-02	—
CVE-2015-8776US	critical9.1	4.80% (92nd)	—	no fix	2016-04-19	—
CVE-2016-0687US	critical9.6	4.72% (92nd)	—	no fix	2016-04-21	—
CVE-2016-0686US	critical9.6	4.72% (92nd)	—	no fix	2016-04-21	—
CVE-2015-8390US	critical9.8	4.66% (92nd)	—	no fix	2015-12-02	—
CVE-2015-8380US	high7.5	4.44% (91st)	—	no fix	2015-12-02	—
CVE-2015-8393US	high7.5	4.37% (91st)	—	no fix	2015-12-02	—
CVE-2015-2327US	high7.5	4.05% (91st)	—	no fix	2015-12-02	—
CVE-2016-3449US	high8.3	4.01% (90th)	—	no fix	2016-04-21	—
CVE-2015-8382US	medium6.4	3.96% (90th)	—	no fix	2015-12-02	—
CVE-2015-8389US	critical9.8	3.89% (90th)	—	no fix	2015-12-02	—
CVE-2016-3425US	medium4.3	3.80% (90th)	—	no fix	2016-04-21	—
CVE-2015-8387US	high7.3	3.64% (90th)	—	no fix	2015-12-02	—
CVE-2015-8392US	high7.5	3.56% (89th)	—	no fix	2015-12-02	—
CVE-2015-8395US	high7.5	3.54% (89th)	—	no fix	2015-12-02	—
CVE-2015-8384US	high7.5	3.40% (89th)	—	no fix	2015-12-02	—
CVE-2016-0695US	medium5.9	3.40% (89th)	—	no fix	2016-04-21	—
CVE-2016-3422US	medium4.3	2.80% (86th)	—	no fix	2016-04-21	—
CVE-2016-3426US	low3.1	2.79% (86th)	—	no fix	2016-04-21	—
CVE-2016-2178US	medium5.5	1.24% (69th)	—	no fix	2016-06-20	—
CVE-2015-8777US	medium5.5	0.57% (47th)	—	no fix	2016-01-20	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer16 CVEs
CWE-17CWE-174 CVEs
CWE-190Integer Overflow or Wraparound4 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-399CWE-3993 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)48 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan