n/a BIG-IP APM

Name: n/a BIG-IP APM
Brand: n/a

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical6high12medium0low

updated 2026-10-27

vulnerabilities (19)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-23008US	critical9.8	1.33% (71st)	—	no fix	2021-05-10	≤ 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and all versions of 16.0.x and 11.6.x.
CVE-2020-27716US	high7.5	1.31% (70th)	—	no fix	2020-12-24	≤ 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.5, 12.1.0-12.1.5.2, 11.6.1-11.6.5.2
CVE-2020-5874US	high7.5	1.31% (70th)	—	no fix	2020-04-30	≤ 15.0.0-15.0.1.2, 14.1.0-14.1.2.3, 14.0.0-14.0.1
CVE-2020-5924US	medium5.3	1.12% (66th)	—	no fix	2020-08-26	≤ 12.1.0-12.1.5.1, 11.6.1-11.6.5.2
CVE-2020-27723US	high7.5	1.04% (64th)	—	no fix	2020-12-24	≤ 14.1.0-14.1.3, 13.1.0-13.1.3.4
CVE-2020-5919US	high7.5	1.04% (64th)	—	no fix	2020-08-26	≤ 15.1.0-15.1.0.4
CVE-2019-6661US	high7.5	1.04% (64th)	—	no fix	2019-11-15	≤ 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.4.1, 11.5.1-11.6.5
CVE-2021-22985US	high7.5	1.01% (63rd)	—	no fix	2021-02-12	≤ 16.0.x before 16.0.1.1
CVE-2020-27724US	medium6.5	0.90% (59th)	—	no fix	2020-12-24	≤ 16.0.0-16.0.0.1, 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, 11.6.1-11.6.5.2
CVE-2020-27722US	medium6.5	0.87% (59th)	—	no fix	2020-12-24	≤ 15.0.0-15.0.1.3, 14.1.0-14.1.3, 13.1.0-13.1.3.4
CVE-2021-23016US	medium5.3	0.83% (57th)	—	no fix	2021-05-10	≤ 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, and all versions of 16.0.x, 12.1.x, and 11.6.x.
CVE-2022-23014US	medium6.5	0.82% (57th)	—	no fix	2022-01-25	≤ 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1
CVE-2020-27726US	medium6.1	0.77% (55th)	—	no fix	2020-12-24	≤ 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2
CVE-2020-5889US	medium5.4	0.72% (54th)	—	no fix	2020-04-30	≤ 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, 14.1.0-14.1.2.3
CVE-2020-27729US	medium6.1	0.64% (51st)	—	no fix	2020-12-24	≤ 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2, 11.6.1-11.6.5.2
CVE-2021-23047US	medium5.3	0.60% (48th)	—	no fix	2021-09-14	≤ 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, and all versions of 13.1.x, 12.1.x and 11.6.x
CVE-2021-23054US	medium6.1	0.58% (48th)	—	no fix	2021-09-27	≤ 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of 13.1.x, 12.1.x, and 11.6.x
CVE-2021-23052US	medium6.1	0.58% (48th)	—	no fix	2021-09-14	≤ 14.1.x before 14.1.4.4 and all versions of 13.1.x
CVE-2020-5934US	medium6.5	0.45% (39th)	—	no fix	2020-10-29	≤ 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3

weaknesses (6)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption8 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-287Improper Authentication2 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')2 CVEs
CWE-401Missing Release of Memory after Effective Lifetime1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)19 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan