# F5 Big-Ip Advanced Web Application Firewall


- [CVE-2023-46747](https://insights.sbomify.com/CVE-2023-46747/): F5 BIG-IP Configuration Utility Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2021-22986](https://insights.sbomify.com/CVE-2021-22986/): F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-22991](https://insights.sbomify.com/CVE-2021-22991/): F5 BIG-IP Traffic Management Microkernel Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2020-5902](https://insights.sbomify.com/CVE-2020-5902/): F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2023-46748](https://insights.sbomify.com/CVE-2023-46748/): F5 BIG-IP Configuration Utility SQL Injection (high 8.8, exploited in the wild)
- [CVE-2023-44487](https://insights.sbomify.com/CVE-2023-44487/): HTTP/2 Rapid Reset Attack (high 7.5, exploited in the wild)
- [CVE-2021-23031](https://insights.sbomify.com/CVE-2021-23031/): Privilege escalation in BIG-IP Advanced WAF and BIG-IP ASM (critical 9.9)
- [CVE-2021-22987](https://insights.sbomify.com/CVE-2021-22987/): Command injection in BIG-IP Appliance Mode (critical 9.9)
- [CVE-2021-22992](https://insights.sbomify.com/CVE-2021-22992/): Memory corruption in BIG-IP Advanced WAF and BIG-IP ASM (critical 9.8)
- [CVE-2021-22989](https://insights.sbomify.com/CVE-2021-22989/): Command injection in BIG-IP Advanced WAF or BIG-IP ASM in Appliance Mode (critical 9.1)
- [CVE-2025-20058](https://insights.sbomify.com/CVE-2025-20058/): BIG-IP message routing vulnerability (high 8.9)
- [CVE-2025-21087](https://insights.sbomify.com/CVE-2025-21087/): TMM Vulnerability (high 8.9)

---
From sbomify Insights: https://insights.sbomify.com/products/f5/big-ip-advanced-web-application-firewall/