F5 BIG-IP 17.1.0-17.1.2

productDE

cpe:/a:f5:big-ip:17.1.0_-_17.1.2

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

6critical4high5medium0low

updated 2026-10-27

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-53020US	—	4.96% (92nd)	Exploit	no fix	2025-07-10	—
CVE-2023-38709US	—	3.91% (90th)	Exploit	no fix	2024-04-04	—
CVE-2025-23048US	—	1.04% (64th)	Exploit	no fix	2025-07-10	—
CVE-2025-49812US	—	0.61% (49th)	Exploit	no fix	2025-07-10	—
CVE-2019-9948US	critical9.1	11.8% (96th)	—	no fix	2019-03-23	—
CVE-2019-3855US	high8.8	9.29% (95th)	—	no fix	2019-03-21	—
CVE-2019-3862US	critical9.1	7.90% (95th)	—	no fix	2019-03-21	—
CVE-2019-3858US	critical9.1	6.45% (94th)	—	no fix	2019-03-21	—
CVE-2019-3859US	critical9.1	6.28% (94th)	—	no fix	2019-03-21	—
CVE-2019-3857US	high8.8	6.13% (93rd)	—	no fix	2019-03-25	—
CVE-2019-3856US	high8.8	6.13% (93rd)	—	no fix	2019-03-25	—
CVE-2023-45648US	medium5.3	5.88% (93rd)	—	no fix	2023-10-10	—
CVE-2019-3860US	critical9.1	5.42% (93rd)	—	no fix	2019-03-25	—
CVE-2019-9947US	medium6.1	5.25% (93rd)	—	no fix	2019-03-23	—
CVE-2019-3861US	critical9.1	5.12% (92nd)	—	no fix	2019-03-25	—
CVE-2019-18348US	medium6.1	3.51% (89th)	—	no fix	2019-10-23	—
CVE-2019-3863US	high8.8	3.44% (89th)	—	no fix	2019-03-25	—
CVE-2024-24795US	—	2.87% (87th)	—	no fix	2024-04-04	—
CVE-2023-42795US	medium5.3	2.51% (85th)	—	no fix	2023-10-10	—
CVE-2023-42794US	medium5.9	2.30% (83rd)	—	no fix	2023-10-10	—
CVE-2025-49630US	—	1.35% (71st)	—	no fix	2025-07-10	—
CVE-2024-43394US	—	1.27% (70th)	—	no fix	2025-07-10	—
CVE-2024-27982US	—	1.16% (67th)	—	no fix	2024-05-07	—
CVE-2024-43204US	—	0.91% (60th)	—	no fix	2025-07-10	—
CVE-2024-42516US	—	0.82% (57th)	—	no fix	2025-07-10	—
CVE-2024-47252US	—	0.80% (56th)	—	no fix	2025-07-10	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read5 CVEs
CWE-130Improper Handling of Length Parameter Inconsistency5 CVEs
CWE-190Integer Overflow or Wraparound4 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')2 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')2 CVEs
CWE-459Incomplete Cleanup2 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan