| CVE-2025-24320 |
A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that…
|
5.1
Medium
|
Feb 5, 2025 |
| CVE-2025-24312 |
When BIG-IP AFM is provisioned with IPS module enabled and protocol inspection profile is configured on a virtual server…
|
7.5
High
|
Feb 5, 2025 |
| CVE-2025-22846 |
When SIP Session and Router ALG profiles are configured on a Message Routing type virtual server, undisclosed traffic…
|
7.5
High
|
Feb 5, 2025 |
| CVE-2025-23412 |
When BIG-IP APM Access Profile is configured on a virtual server, undisclosed request can cause TMM to terminate
|
7.5
High
|
Feb 5, 2025 |
| CVE-2025-23239 |
When running in Appliance mode, and logged into a highly-privileged role, an authenticated remote command injection…
|
8.7
High
|
Feb 5, 2025 |
| CVE-2025-24326 |
When BIG-IP Advanced WAF/ASM Behavioral DoS (BADoS) TLS Signatures feature is configured, undisclosed traffic can case…
|
7.5
High
|
Feb 5, 2025 |
| CVE-2025-20045 |
When SIP session Application Level Gateway mode (ALG) profile with Passthru Mode enabled and SIP router ALG profile…
|
7.5
High
|
Feb 5, 2025 |
| CVE-2025-22891 |
When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed…
|
7.5
High
|
Feb 5, 2025 |
| CVE-2025-20058 |
When a BIG-IP message routing profile is configured on a virtual server, undisclosed traffic can cause an increase in…
|
7.5
High
|
Feb 5, 2025 |
| CVE-2025-23415 |
An insufficient verification of data authenticity vulnerability exists in BIG-IP APM Access Policy endpoint inspection…
|
3.1
Low
|
Feb 5, 2025 |
| CVE-2025-21091 |
When SNMP v1 or v2c are disabled on the BIG-IP, undisclosed requests can cause an increase in memory resource…
|
7.5
High
|
Feb 5, 2025 |
| CVE-2025-21087 |
When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use,…
|
7.5
High
|
Feb 5, 2025 |
| CVE-2024-45844 |
BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port…
|
7.2
High
|
Oct 16, 2024 |
| CVE-2024-41727 |
In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV…
|
7.5
High
|
Aug 14, 2024 |
| CVE-2024-41164 |
When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with…
|
5.9
Medium
|
Aug 14, 2024 |
| CVE-2024-39778 |
When a stateless virtual server is configured on BIG-IP system with a High-Speed Bridge (HSB), undisclosed requests…
|
7.5
High
|
Aug 14, 2024 |
| CVE-2024-41723 |
Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names. Note: Software…
|
4.3
Medium
|
Aug 14, 2024 |
| CVE-2024-32761 |
Under certain conditions, a data leak may occur in the Traffic Management Microkernels (TMMs) of BIG-IP tenants…
|
6.5
Medium
|
May 8, 2024 |
| CVE-2024-33604 |
A reflected cross-site scripting (XSS) vulnerability exist in undisclosed page of the BIG-IP Configuration utility…
|
6.1
Medium
|
May 8, 2024 |
| CVE-2024-31156 |
A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that…
|
8.0
High
|
May 8, 2024 |
| CVE-2024-28889 |
When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic…
|
5.9
Medium
|
May 8, 2024 |
| CVE-2024-27202 |
A DOM-based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility…
|
4.7
Medium
|
May 8, 2024 |
| CVE-2024-33608 |
When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM)…
|
7.5
High
|
May 8, 2024 |
| CVE-2024-25560 |
When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel…
|
7.5
High
|
May 8, 2024 |
| CVE-2024-28883 |
An origin validation vulnerability exists in BIG-IP APM browser network access VPN client for Windows, macOS and…
|
7.4
High
|
May 8, 2024 |