# F5 Big-Ip Webaccelerator


- [CVE-2023-46747](https://insights.sbomify.com/CVE-2023-46747/): F5 BIG-IP Configuration Utility Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2014-7169](https://insights.sbomify.com/CVE-2014-7169/): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2014-6271](https://insights.sbomify.com/CVE-2014-6271/): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2023-46748](https://insights.sbomify.com/CVE-2023-46748/): F5 BIG-IP Configuration Utility SQL Injection (high 8.8, exploited in the wild)
- [CVE-2018-14634](https://insights.sbomify.com/CVE-2018-14634/): Linux Kernel Integer Overflow (high 7.8, exploited in the wild)
- [CVE-2023-44487](https://insights.sbomify.com/CVE-2023-44487/): HTTP/2 Rapid Reset Attack (high 7.5, exploited in the wild)
- [CVE-2014-0196](https://insights.sbomify.com/CVE-2014-0196/): Linux Kernel Race Condition (medium 5.5, exploited in the wild)
- [CVE-2019-6609](https://insights.sbomify.com/CVE-2019-6609/): Information disclosure in BIG-IP APM (critical 9.8)
- [CVE-2018-5506](https://insights.sbomify.com/CVE-2018-5506/): Information disclosure in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (critical 9.8)
- [CVE-2016-5022](https://insights.sbomify.com/CVE-2016-5022/): Denial of service in n/a (critical 9.8)
- [CVE-2019-6644](https://insights.sbomify.com/CVE-2019-6644/): Misconfiguration in BIG-IP (critical 9.4)
- [CVE-2014-2927](https://insights.sbomify.com/CVE-2014-2927/): Auth bypass in n/a (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/products/f5/big-ip-webaccelerator/