Documented CVEs
2 vulnerabilities cataloged in the Hermes intelligence repository.
F5 BIG-IP TMOS — Security Intelligence & Vulnerability Profile
1. Software Identity & Security Posture
Section titled “1. Software Identity & Security Posture”| Parameter | Technical Specification |
|---|---|
| Official Name | F5 BIG-IP TMOS |
| Vendor / Project | f5 |
| Canonical ID | f5:big-ip |
| Versioning Scheme | semver |
| CPE Identifiers | cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* |
| Overall Posture | CRITICAL |
| Recommended Safe Release | 17.1.1.1 |
CISA KEV Entries
2 flaws with confirmed active in-the-wild exploitation.
Weaponized Exploits
2 vulnerabilities with publicly available PoCs or weaponized exploit tooling.
Remediation Target
Recommended upgrade to 17.1.1.1 to neutralize known flaws.
2. 30-Day Risk Trajectory & Trend Evolution
Section titled “2. 30-Day Risk Trajectory & Trend Evolution”Progression of Hermes Threat Score (HTS) posture and maximum EPSS probability over the last 30 days:
Current HTS Score
0 / 100
= Stable over 30d
Max EPSS (Exploitation)
100.0 %
= Stable over 30d
CISA KEV Activity
2
Active in-the-wild exploitation
HTS Trend Curve (D-30 → Today)2026-08-12 → 2026-09-10
3. Vulnerability History & Version Applicability Matrix
Section titled “3. Vulnerability History & Version Applicability Matrix”| CVE | CVSS Score | EPSS Probability | CISA KEV | Affected Versions | Fixed In | Hermes Analysis |
|---|---|---|---|---|---|---|
| CVE-2023-46747 | 9.8 (CRITICAL) | 96.5% | CISA KEV | < v14.1.5.6, < v15.1.10.2, < v16.1.4.1, < v17.1.1.1 | 14.1.5.6, 15.1.10.2, 16.1.4.1, 17.1.1.1 | - |
| CVE-2022-1388 | 9.8 (CRITICAL) | 100.0% | CISA KEV | < v13.1.5, < v14.1.4.6, < v15.1.5.1, < v16.1.2.2, < v17.0.0.1 | 13.1.5, 14.1.4.6, 15.1.5.1, 16.1.2.2, 17.0.0.1 | - |
4. Ransomware & Threat Actor Exposure
Section titled “4. Ransomware & Threat Actor Exposure”Vulnerabilities impacting F5 BIG-IP TMOS are actively leveraged in real-world intrusion campaigns:
- CVE-2023-46747: https://my.f5.com/manage/s/article/K000137353; https://nvd.nist.gov/vuln/detail/CVE-2023-46747
- CVE-2022-1388: https://nvd.nist.gov/vuln/detail/CVE-2022-1388
5. Evaluate Running Versions in Interactive Workbench
Section titled “5. Evaluate Running Versions in Interactive Workbench”Are you operating F5 BIG-IP TMOS in your infrastructure? Inspect your running build to evaluate applicability, confidence score, and security deltas:
Launch Software Intelligence Workbench for F5 BIG-IP TMOS Run deterministic in-browser evaluation, calculate HTS threat reduction, and plan your upgrade path.