In BIG-IP versions 15.0.0-15.1.0.3 14.1.0-14.1.2.5 13.1.0-13.1.3.3 12.1.0-12.1.5.1 a cross-site request forgery (CSRF) vulnerability in the Traffic Management User Interface (TMUI) also referred to as the Configuration utility exists in an undisclosed page.