F5 Big-Ip Advanced Web Application Firewall vulnerabilities
195 published vulnerabilities in F5 Big-Ip Advanced Web Application Firewall, 6 of them exploited in the wild. The most were published in 2021 (47), and 43 so far in 2026.
F5 Big-Ip Advanced Web Application Firewall vulnerabilities by year
2002
2020
2021
2022
2023
2024
2025
2026
Most exploited F5 Big-Ip Advanced Web Application Firewall vulnerabilities
- CVE-2023-46747 F5 BIG-IP Configuration Utility Authentication Bypass
- CVE-2021-22986 F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution
- CVE-2021-22991 F5 BIG-IP Traffic Management Microkernel Buffer Overflow
- CVE-2020-5902 F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution
- CVE-2023-46748 F5 BIG-IP Configuration Utility SQL Injection
- CVE-2023-44487 HTTP/2 Rapid Reset Attack
- CVE-2021-23031 Privilege escalation in BIG-IP Advanced WAF and BIG-IP ASM
- CVE-2021-22987 Command injection in BIG-IP Appliance Mode
- CVE-2021-22992 Memory corruption in BIG-IP Advanced WAF and BIG-IP ASM
- CVE-2021-22989 Command injection in BIG-IP Advanced WAF or BIG-IP ASM in Appliance Mode
- CVE-2025-20058 BIG-IP message routing vulnerability
- CVE-2025-21087 TMM Vulnerability
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.