# F5 Big-Ip Fraud Protection Service


- [CVE-2022-1388](https://insights.sbomify.com/CVE-2022-1388/): F5 BIG-IP Missing Authentication (critical 9.8, exploited in the wild)
- [CVE-2021-22986](https://insights.sbomify.com/CVE-2021-22986/): F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2021-22991](https://insights.sbomify.com/CVE-2021-22991/): F5 BIG-IP Traffic Management Microkernel Buffer Overflow (critical 9.8, exploited in the wild)
- [CVE-2020-5902](https://insights.sbomify.com/CVE-2020-5902/): F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2018-14634](https://insights.sbomify.com/CVE-2018-14634/): Linux Kernel Integer Overflow (high 7.8, exploited in the wild)
- [CVE-2023-44487](https://insights.sbomify.com/CVE-2023-44487/): HTTP/2 Rapid Reset Attack (high 7.5, exploited in the wild)
- [CVE-2021-22987](https://insights.sbomify.com/CVE-2021-22987/): Command injection in BIG-IP Appliance Mode (critical 9.9)
- [CVE-2021-22992](https://insights.sbomify.com/CVE-2021-22992/): Memory corruption in BIG-IP Advanced WAF and BIG-IP ASM (critical 9.8)
- [CVE-2019-6675](https://insights.sbomify.com/CVE-2019-6675/): Auth bypass in BIG-IP (critical 9.8)
- [CVE-2019-6609](https://insights.sbomify.com/CVE-2019-6609/): Information disclosure in BIG-IP APM (critical 9.8)
- [CVE-2021-23037](https://insights.sbomify.com/CVE-2021-23037/): Cross-site scripting in BIG-IP (critical 9.6)
- [CVE-2020-5948](https://insights.sbomify.com/CVE-2020-5948/): Cross-site scripting in BIG-IP (critical 9.6)

---
From sbomify Insights: https://insights.sbomify.com/products/f5/big-ip-fraud-protection-service/