[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWOoaq41LYE3Vbyud27XNgY7SuaEpQJHZkAae6752Kj8":3,"g5a-family:f5\u002Fbig-ip_automation_toolchain":210,"g5a-ex:f5\u002Fbig-ip_automation_toolchain@*":211},{"success":4,"data":5},true,{"product":6,"versions":88,"topVulnerabilitiesByEpss":124,"kevVulnerabilities":179,"seoMetadata":188,"meta":207},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":87},"f5","big-ip_automation_toolchain",35,11,2,"2025-10-15",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,59,61,63,65,67,69,71,73,75,77,79,81,83,85],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.0",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"13.1.5",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"14.1.0",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"14.1.5",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"15.1.0",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"15.1.10",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"15.1.10.4",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"15.1.10.5",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"15.1.10.6",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"15.1.10.7",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"15.1.1.0.8",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"15.1.10.8",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"15.1.9",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"16.1.0",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"16.1.4",{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},"16.1.4.3",{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"16.1.5",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"16.1.5.2",{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},"16.1.6",{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},"16.1.6.1",{"version":57,"cve_count":58,"kev_count":16,"has_kev":17},"17.1.0",4,{"version":60,"cve_count":16,"kev_count":16,"has_kev":17},"17.1.1",{"version":62,"cve_count":16,"kev_count":16,"has_kev":17},"17.1.1.3",{"version":64,"cve_count":16,"kev_count":16,"has_kev":17},"17.1.1.4",{"version":66,"cve_count":16,"kev_count":16,"has_kev":17},"17.1.2",{"version":68,"cve_count":16,"kev_count":16,"has_kev":17},"17.1.2.1",{"version":70,"cve_count":16,"kev_count":16,"has_kev":17},"17.1.2.2",{"version":72,"cve_count":16,"kev_count":16,"has_kev":17},"17.1.3",{"version":74,"cve_count":16,"kev_count":16,"has_kev":17},"17.1.3.1",{"version":76,"cve_count":11,"kev_count":16,"has_kev":17},"17.5.0",{"version":78,"cve_count":16,"kev_count":16,"has_kev":17},"17.5.1",{"version":80,"cve_count":16,"kev_count":16,"has_kev":17},"17.5.1.1",{"version":82,"cve_count":16,"kev_count":16,"has_kev":17},"17.5.1.2",{"version":84,"cve_count":16,"kev_count":16,"has_kev":17},"17.5.1.3",{"version":86,"cve_count":16,"kev_count":16,"has_kev":17},"17.5.1.4","Big-ip Automation Toolchain by F5 is a technology product with 35 tracked versions and 11 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},{"version":57,"cve_count":58,"kev_count":16,"has_kev":17},{"version":60,"cve_count":16,"kev_count":16,"has_kev":17},{"version":62,"cve_count":16,"kev_count":16,"has_kev":17},{"version":64,"cve_count":16,"kev_count":16,"has_kev":17},{"version":66,"cve_count":16,"kev_count":16,"has_kev":17},{"version":68,"cve_count":16,"kev_count":16,"has_kev":17},{"version":70,"cve_count":16,"kev_count":16,"has_kev":17},{"version":72,"cve_count":16,"kev_count":16,"has_kev":17},{"version":74,"cve_count":16,"kev_count":16,"has_kev":17},{"version":76,"cve_count":11,"kev_count":16,"has_kev":17},{"version":78,"cve_count":16,"kev_count":16,"has_kev":17},{"version":80,"cve_count":16,"kev_count":16,"has_kev":17},{"version":82,"cve_count":16,"kev_count":16,"has_kev":17},{"version":84,"cve_count":16,"kev_count":16,"has_kev":17},{"version":86,"cve_count":16,"kev_count":16,"has_kev":17},[125,133,139,146,149,154,158,163,169,175],{"cveId":126,"description":127,"publishedDate":128,"cvssScore":129,"cvssVersion":130,"severity":131,"isKev":4,"epssScore":132},"CVE-2023-46747","Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and\u002For self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated","2023-10-26",9.8,"v3.1","Critical",0.9675,{"cveId":134,"description":135,"publishedDate":128,"cvssScore":136,"cvssVersion":130,"severity":137,"isKev":4,"epssScore":138},"CVE-2023-46748","An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which \n\nmay allow an authenticated attacker with network access to the Configuration utility through the BIG-IP management port and\u002For self IP addresses to execute arbitrary system commands.\n\n Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated",8.8,"High",0.04228,{"cveId":140,"description":141,"publishedDate":142,"cvssScore":143,"cvssVersion":144,"severity":137,"isKev":17,"epssScore":145},"CVE-2024-41727","In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV NIC, undisclosed traffic can cause an increase in memory resource utilization.  \n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","2024-08-14",8.7,"v4.0",0.00481,{"cveId":147,"description":148,"publishedDate":142,"cvssScore":143,"cvssVersion":144,"severity":137,"isKev":17,"epssScore":145},"CVE-2024-39778","When a stateless virtual server is configured on BIG-IP system with a High-Speed Bridge (HSB), undisclosed requests can cause TMM to terminate.\n\n  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",{"cveId":150,"description":151,"publishedDate":142,"cvssScore":152,"cvssVersion":144,"severity":137,"isKev":17,"epssScore":153},"CVE-2024-41164","When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions beyond the attackers control can cause TMM to terminate.\n\n \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",8.2,0.0044,{"cveId":155,"description":156,"publishedDate":12,"cvssScore":143,"cvssVersion":130,"severity":137,"isKev":17,"epssScore":157},"CVE-2025-61958","A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role to bypass tmsh restrictions and gain access to a bash shell.  For BIG-IP systems running in Appliance mode, a successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",0.00393,{"cveId":159,"description":160,"publishedDate":12,"cvssScore":161,"cvssVersion":130,"severity":137,"isKev":17,"epssScore":162},"CVE-2025-59781","When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilization.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",7.5,0.00348,{"cveId":164,"description":165,"publishedDate":142,"cvssScore":166,"cvssVersion":144,"severity":167,"isKev":17,"epssScore":168},"CVE-2024-41723","Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",5.3,"Medium",0.00301,{"cveId":170,"description":171,"publishedDate":12,"cvssScore":172,"cvssVersion":130,"severity":173,"isKev":17,"epssScore":174},"CVE-2025-58424","On BIG-IP systems, undisclosed traffic can cause data corruption and unauthorized data modification in protocols which do not have message integrity protection.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",3.7,"Low",0.00246,{"cveId":176,"description":177,"publishedDate":12,"cvssScore":161,"cvssVersion":130,"severity":137,"isKev":17,"epssScore":178},"CVE-2025-61951","Undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  This issue may occur when a Datagram Transport Layer Security (DTLS) 1.2 virtual server is enabled with a Server SSL profile that is configured with a certificate, key, and the SSL Sign Hash set to ANY, and the backend server is enabled with DTLS 1.2 and client authentication.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.",0.00238,[180,185],{"cveId":126,"description":127,"publishedDate":128,"cvssScore":129,"severity":131,"isKev":4,"epssScore":132,"cisaVulnName":181,"cisaDateAdded":182,"cisaShortDescription":183,"cisaRequiredAction":184},"F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability","2023-10-31","F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due to undisclosed requests that may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and\u002For self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46748.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":134,"description":135,"publishedDate":128,"cvssScore":136,"severity":137,"isKev":4,"epssScore":138,"cisaVulnName":186,"cisaDateAdded":182,"cisaShortDescription":187,"cisaRequiredAction":184},"F5 BIG-IP Configuration Utility SQL Injection Vulnerability","F5 BIG-IP Configuration utility contains an SQL injection vulnerability that may allow an authenticated attacker with network access through the BIG-IP management port and\u002For self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46747.",{"title":189,"metaDescription":190,"keywords":191,"structuredData":192},"Big-ip Automation Toolchain by F5 - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Big-ip Automation Toolchain by F5 covering 35 versions with 11 tracked vulnerabilities including 1 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Big-ip Automation Toolchain vulnerabilities, Big-ip Automation Toolchain security, Big-ip Automation Toolchain CVE, F5 Big-ip Automation Toolchain, Big-ip Automation Toolchain threat intelligence, F5 security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Big-ip Automation Toolchain KEV, Big-ip Automation Toolchain exploited vulnerabilities",{"@context":193,"@type":194,"name":195,"description":190,"url":196,"manufacturer":197,"applicationCategory":201,"softwareVersion":202,"mainEntity":203},"https:\u002F\u002Fschema.org","SoftwareApplication","Big-ip Automation Toolchain","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ff5\u002Fbig-ip_automation_toolchain",{"@type":198,"name":199,"url":200},"Organization","F5","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Ff5","Security Software","35 versions tracked",{"@type":204,"name":205,"description":206,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Big-ip Automation Toolchain Security Vulnerabilities","Security vulnerabilities affecting Big-ip Automation Toolchain by F5",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":208,"apiVersion":209},"2026-10-28T17:42:27.518Z","3.0",[],{"rows":212,"total":11,"capped":17,"failed":16},[213,222],{"cveId":126,"name":181,"severity":131,"cvss":129,"added":182,"epss":132,"published":214,"ranges":215,"checked":4,"hits":221,"covers":17},"2023-10-26T21:15:08.097",[216,217,218,219,220],"13.1.0 to 13.1.5","14.1.0 to 14.1.5","15.1.0 to 15.1.10","16.1.0 to 16.1.4","17.1.0 to 17.1.1",[],{"cveId":134,"name":186,"severity":137,"cvss":136,"added":182,"epss":138,"published":223,"ranges":224,"checked":4,"hits":225,"covers":17},"2023-10-26T21:15:08.177",[216,217,218,219,220],[]]