F5 BIG-IP 16.1.0-16.1.5

productDE

cpe:/a:f5:big-ip:16.1.0_-_16.1.5

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

8critical7high5medium0low

updated 2026-10-27

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-38475US	critical9.1OT critical	100.0% (100th)	KEV	no fix	2024-07-01	—
CVE-2024-38472US	—	69.5% (99th)	Exploit	no fix	2024-07-01	—
CVE-2024-38476US	critical9.8	41.6% (99th)	Exploit	no fix	2024-07-01	—
CVE-2024-38473US	—	25.9% (98th)	Exploit	no fix	2024-07-01	—
CVE-2023-51385US	medium6.5	19.8% (97th)	Exploit	no fix	2023-12-18	—
CVE-2024-0760US	—	4.68% (92nd)	Exploit	no fix	2024-07-23	—
CVE-2023-38709US	—	3.91% (90th)	Exploit	no fix	2024-04-04	—
CVE-2024-39573US	—	35.4% (98th)	—	no fix	2024-07-01	—
CVE-2019-3855US	high8.8	9.29% (95th)	—	no fix	2019-03-21	—
CVE-2019-3862US	critical9.1	7.90% (95th)	—	no fix	2019-03-21	—
CVE-2019-3858US	critical9.1	6.45% (94th)	—	no fix	2019-03-21	—
CVE-2019-3859US	critical9.1	6.28% (94th)	—	no fix	2019-03-21	—
CVE-2019-3857US	high8.8	6.13% (93rd)	—	no fix	2019-03-25	—
CVE-2019-3856US	high8.8	6.13% (93rd)	—	no fix	2019-03-25	—
CVE-2023-45648US	medium5.3	5.88% (93rd)	—	no fix	2023-10-10	—
CVE-2019-3860US	critical9.1	5.42% (93rd)	—	no fix	2019-03-25	—
CVE-2019-3861US	critical9.1	5.12% (92nd)	—	no fix	2019-03-25	—
CVE-2019-3863US	high8.8	3.44% (89th)	—	no fix	2019-03-25	—
CVE-2024-38477US	high7.5	3.15% (88th)	—	no fix	2024-07-01	—
CVE-2024-24795US	—	2.87% (87th)	—	no fix	2024-04-04	—
CVE-2023-42795US	medium5.3	2.51% (85th)	—	no fix	2023-10-10	—
CVE-2024-38474US	critical9.8	2.46% (84th)	—	no fix	2024-07-01	—
CVE-2023-42794US	medium5.9	2.30% (83rd)	—	no fix	2023-10-10	—
CVE-2024-1975US	—	2.11% (82nd)	—	no fix	2024-07-23	—
CVE-2024-1737US	—	2.11% (82nd)	—	no fix	2024-07-23	—
CVE-2024-4076US	—	2.11% (82nd)	—	no fix	2024-07-23	—
CVE-2024-36387US	—	1.71% (77th)	—	no fix	2024-07-01	—
CVE-2023-37369US	high7.5	1.58% (75th)	—	no fix	2023-08-20	—
CVE-2023-38197US	high7.5	1.28% (70th)	—	no fix	2023-07-13	—
CVE-2024-27982US	—	1.16% (67th)	—	no fix	2024-05-07	—
CVE-2023-51384US	medium5.5	0.43% (37th)	—	no fix	2023-12-18	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read5 CVEs
CWE-130Improper Handling of Length Parameter Inconsistency5 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-190Integer Overflow or Wraparound4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-116Improper Encoding or Escaping of Output3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan