| CVE-2026-66842 |
BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts…
|
8.8
High
|
Sep 2, 2026 |
| CVE-2026-41959 |
Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) network diagnostics…
|
6.5
Medium
|
May 13, 2026 |
| CVE-2026-42406 |
A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least…
|
8.7
High
|
May 13, 2026 |
| CVE-2026-32643 |
A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least…
|
8.7
High
|
May 13, 2026 |
| CVE-2026-42937 |
Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and…
|
6.5
Medium
|
May 13, 2026 |
| CVE-2026-40698 |
A vulnerability exists in BIG-IP and BIG-IQ systems where a highly privileged, authenticated attacker with at least…
|
8.7
High
|
May 13, 2026 |
| CVE-2026-20916 |
An authenticated iControl REST user with low privileges can create or modify arbitrary files through an undisclosed…
|
8.1
High
|
May 13, 2026 |
| CVE-2026-41957 |
An authenticated remote code execution vulnerability through undisclosed vectors exists in the BIG-IP and BIG-IQ…
|
8.8
High
|
May 13, 2026 |
| CVE-2026-41219 |
An improper sanitization vulnerability exists in the BIG-IP QKView utility that allows a low-privileged attacker to read…
|
6.5
Medium
|
May 13, 2026 |
| CVE-2026-41954 |
Sensitive information disclosure vulnerability exists in the undisclosed iControl REST endpoint and TMOS Shell (tmsh)…
|
4.9
Medium
|
May 13, 2026 |
| CVE-2024-47139 |
A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IQ Configuration utility that…
|
4.8
Medium
|
Oct 16, 2024 |
| CVE-2024-21782 |
BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy (scp) utility but…
|
6.7
Medium
|
Feb 14, 2024 |
| CVE-2023-43485 |
When TACACS+ audit forwarding is configured on BIG-IP or BIG-IQ system, sharedsecret is logged in plaintext in the audit…
|
5.5
Medium
|
Oct 10, 2023 |
| CVE-2023-41964 |
The BIG-IP and BIG-IQ systems do not encrypt some sensitive information written to Database (DB) variables. Note:…
|
4.3
Medium
|
Oct 10, 2023 |
| CVE-2023-38419 |
An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending…
|
4.3
Medium
|
Aug 2, 2023 |
| CVE-2023-29240 |
An authenticated attacker granted a Viewer or Auditor role on a BIG-IQ can upload arbitrary files using an undisclosed…
|
5.4
Medium
|
May 3, 2023 |
| CVE-2022-41770 |
In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all…
|
6.5
Medium
|
Oct 19, 2022 |
| CVE-2022-41694 |
In BIG-IP versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, and…
|
4.9
Medium
|
Oct 19, 2022 |
| CVE-2019-6688 |
On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5…
|
Not rated
|
Dec 23, 2019 |
| CVE-2019-6665 |
On BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and 5.2.0-5.4.0,…
|
Not rated
|
Nov 27, 2019 |