| CVE-2026-22548 |
When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests along with…
|
5.9
Moyenne
|
4 févr. 2026 |
| CVE-2025-61990 |
When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-61933 |
A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of BIG-IP APM that allows an attacker…
|
6.1
Moyenne
|
15 oct. 2025 |
| CVE-2025-61935 |
When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-58071 |
When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-61974 |
When a client SSL profile is configured on a virtual server, undisclosed requests can cause an increase in memory…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-59483 |
A validation vulnerability exists in an undisclosed URL in the Configuration utility. Note: Software versions which…
|
6.5
Moyenne
|
15 oct. 2025 |
| CVE-2025-54755 |
A directory traversal vulnerability exists in TMUI that allows a highly privileged authenticated attacker to access…
|
4.9
Moyenne
|
15 oct. 2025 |
| CVE-2025-61960 |
When a per-request policy is configured on a BIG-IP APM portal access virtual server, undisclosed traffic can cause…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-59481 |
A vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an…
|
8.7
Élevée
|
15 oct. 2025 |
| CVE-2025-61958 |
A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource…
|
8.7
Élevée
|
15 oct. 2025 |
| CVE-2025-54854 |
When a BIG-IP APM OAuth access profile (Resource Server or Resource Client) is configured on a virtual server,…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-58096 |
When the database variable tm.tcpudptxchecksum is configured as non-default value Software-only on a BIG-IP system,…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-53521 |
Exploitée
F5 BIG-IP Unspecified Vulnerability
|
9.8
Critique
|
15 oct. 2025 |
| CVE-2025-54858 |
When a BIG-IP Advanced WAF or BIG-IP ASM Security Policy is configured with a JSON content profile that has a…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-53868 |
When running in Appliance mode, a highly privileged authenticated attacker with access to SCP and SFTP may be able to…
|
8.7
Élevée
|
15 oct. 2025 |
| CVE-2025-61951 |
Undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. This issue may occur when a…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-54479 |
When a classification profile is configured on a virtual server without an HTTP or HTTP/2 profile, undisclosed…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-53856 |
When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-41430 |
When BIG-IP SSL Orchestrator is enabled, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-61938 |
When a BIG-IP Advanced WAF or ASM security policy is configured with a URL greater than 1024 characters in length for…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-58424 |
On BIG-IP systems, undisclosed traffic can cause data corruption and unauthorized data modification in protocols which…
|
5.3
Moyenne
|
15 oct. 2025 |
| CVE-2025-59781 |
When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-55036 |
When BIG-IP SSL Orchestrator explicit forward proxy is configured on a virtual server and the proxy connect feature is…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-55669 |
When the BIG-IP Advanced WAF and ASM security policy and a server-side HTTP/2 profile are configured on a virtual…
|
7.5
Élevée
|
15 oct. 2025 |