# F5 Big-Ip Ssl Orchestrator


- [CVE-2023-46747](https://insights.sbomify.com/CVE-2023-46747/): F5 BIG-IP Configuration Utility Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2023-46748](https://insights.sbomify.com/CVE-2023-46748/): F5 BIG-IP Configuration Utility SQL Injection (high 8.8, exploited in the wild)
- [CVE-2023-44487](https://insights.sbomify.com/CVE-2023-44487/): HTTP/2 Rapid Reset Attack (high 7.5, exploited in the wild)
- [CVE-2025-20058](https://insights.sbomify.com/CVE-2025-20058/): BIG-IP message routing vulnerability (high 8.9)
- [CVE-2025-21087](https://insights.sbomify.com/CVE-2025-21087/): TMM Vulnerability (high 8.9)
- [CVE-2023-41373](https://insights.sbomify.com/CVE-2023-41373/): BIG-IP Configuration Utility vulnerability (high 8.8)
- [CVE-2021-23025](https://insights.sbomify.com/CVE-2021-23025/): Command injection in BIG-IP (high 8.8)
- [CVE-2021-23026](https://insights.sbomify.com/CVE-2021-23026/): Cross-site request forgery in BIG-IP & BIG-IQ (high 8.8)
- [CVE-2026-39455](https://insights.sbomify.com/CVE-2026-39455/): BIG-IP Configuration utility vulnerability (high 8.7)
- [CVE-2026-39458](https://insights.sbomify.com/CVE-2026-39458/): BIG-IP DNS Cache vulnerability (high 8.7)
- [CVE-2026-40423](https://insights.sbomify.com/CVE-2026-40423/): BIG-IP SIP profile vulnerability (high 8.7)
- [CVE-2026-40618](https://insights.sbomify.com/CVE-2026-40618/): BIG-IP SSL/TLS vulnerability (high 8.7)

---
From sbomify Insights: https://insights.sbomify.com/products/f5/big-ip-ssl-orchestrator/