f5 big-ip next service proxy for kubernetes

Name: f5 big-ip next service proxy for kubernetes
Brand: f5

productUS

cpe:2.3:a:f5:big-ip_next_service_proxy_for_kubernetes:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical5high2medium0low

updated 2026-10-28

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	no fix	2023-10-10	1.5.0 → 1.8.2
CVE-2023-45886US	high7.5	2.03% (81st)	—	no fix	2023-11-21	1.5.0 → 1.8.2
CVE-2023-40534US	—	0.65% (51st)	—	no fix	2023-10-10	1.6.0 → 1.8.2
CVE-2026-59762US	—	0.57% (47th)	—	1.7.18	2026-07-15	3 versions
CVE-2023-24594US	medium5.3	0.56% (46th)	—	no fix	2023-05-03	= 1.5.0
CVE-2024-23314US	high7.5	0.52% (44th)	—	1.8.1	2024-02-14	1.5.0 → 1.8.1
CVE-2025-54500US	medium5.3	0.50% (42nd)	—	no fix	2025-08-13	2 versions
CVE-2025-61974US	—	0.46% (40th)	—	no fix	2025-10-15	2 versions
CVE-2023-45226US	high7.4OT elevated	0.46% (39th)	—	no fix	2023-10-10	= 1.5.0
CVE-2025-60016US	—	0.44% (38th)	—	no fix	2025-10-15	1.7.0 → 1.9.2
CVE-2025-48008US	—	0.44% (38th)	—	no fix	2025-10-15	1.7.0 → 1.9.2
CVE-2024-41164US	high7.5	0.44% (38th)	—	1.9.0	2024-08-14	1.7.0 → 1.9.0
CVE-2025-36504US	—	0.44% (38th)	—	no fix	2025-05-07	1.7.0 → 1.9.2
CVE-2025-41414US	—	0.43% (37th)	—	1.7.9	2025-05-07	2 versions
CVE-2025-41399US	—	0.43% (37th)	—	1.7.12	2025-05-07	2 versions
CVE-2025-36557US	—	0.43% (37th)	—	1.7.9	2025-05-07	2 versions
CVE-2025-46706US	—	0.43% (37th)	—	no fix	2025-10-15	1.7.0 → 1.9.2
CVE-2025-22846US	—	0.41% (35th)	—	1.7.7	2025-02-05	5 versions
CVE-2025-61990US	—	0.35% (28th)	—	no fix	2025-10-15	2 versions
CVE-2025-58120US	—	0.35% (28th)	—	1.7.14	2025-10-15	3 versions
CVE-2026-40629US	—	0.32% (25th)	—	no fix	2026-05-13	2 versions
CVE-2026-40618US	—	0.32% (25th)	—	no fix	2026-05-13	2 versions
CVE-2025-55670US	—	0.31% (23rd)	—	no fix	2025-10-15	1.7.0 → 1.9.2
CVE-2025-54805US	—	0.31% (23rd)	—	no fix	2025-10-15	1.7.0 → 1.9.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-770Allocation of Resources Without Limits or Throttling6 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-401Missing Release of Memory after Effective Lifetime3 CVEs
CWE-476NULL Pointer Dereference3 CVEs
CWE-404Improper Resource Shutdown or Release2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-125Out-of-bounds Read1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan