All vulnerabilities
CVE-2020-5902 Known ransomware use
F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability
F5 — BIG-IP
- Added to KEV catalog
- 3 November 2021
- Federal remediation due date
- 3 May 2022
- Weakness classification (CWE)
- CWE-22
CISA Description
F5 BIG-IP Traffic Management User Interface (TMUI) contains a remote code execution vulnerability in undisclosed pages.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2020-5902
More F5 Vulnerabilities
CVE-2025-53521
F5 BIG-IP Stack-Based Buffer Overflow Vulnerability
CVE-2023-46748
F5 BIG-IP Configuration Utility SQL Injection Vulnerability
CVE-2023-46747
F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability
CVE-2022-1388
F5 BIG-IP Missing Authentication Vulnerability
CVE-2021-22991
F5 BIG-IP Traffic Management Microkernel Buffer Overflow
Confirm Your Exposure
Is this vulnerability present in your environment?
CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.
Explore VAPT Services