# F5 Big-Ip Websafe


- [CVE-2023-46747](https://insights.sbomify.com/CVE-2023-46747/): F5 BIG-IP Configuration Utility Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2023-46748](https://insights.sbomify.com/CVE-2023-46748/): F5 BIG-IP Configuration Utility SQL Injection (high 8.8, exploited in the wild)
- [CVE-2023-44487](https://insights.sbomify.com/CVE-2023-44487/): HTTP/2 Rapid Reset Attack (high 7.5, exploited in the wild)
- [CVE-2018-5506](https://insights.sbomify.com/CVE-2018-5506/): Information disclosure in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe) (critical 9.8)
- [CVE-2017-6165](https://insights.sbomify.com/CVE-2017-6165/): Information disclosure in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, WebSafe (critical 9.8)
- [CVE-2017-6131](https://insights.sbomify.com/CVE-2017-6131/): Hardcoded credentials in BIG-IP Azure cloud instance (critical 9.8)
- [CVE-2016-5700](https://insights.sbomify.com/CVE-2016-5700/): Other in n/a (critical 9.8)
- [CVE-2025-20058](https://insights.sbomify.com/CVE-2025-20058/): BIG-IP message routing vulnerability (high 8.9)
- [CVE-2025-21087](https://insights.sbomify.com/CVE-2025-21087/): TMM Vulnerability (high 8.9)
- [CVE-2023-41373](https://insights.sbomify.com/CVE-2023-41373/): BIG-IP Configuration Utility vulnerability (high 8.8)
- [CVE-2016-9251](https://insights.sbomify.com/CVE-2016-9251/): Privilege escalation in BIG-IP (high 8.8)
- [CVE-2026-39455](https://insights.sbomify.com/CVE-2026-39455/): BIG-IP Configuration utility vulnerability (high 8.7)

---
From sbomify Insights: https://insights.sbomify.com/products/f5/big-ip-websafe/