| CVE-2025-46706 |
When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-60016 |
When Diffie-Hellman (DH) group Elliptic Curve Cryptography (ECC) Brainpool curves are configured in an SSL profile's…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-58153 |
Under undisclosed traffic conditions along with conditions beyond the attacker's control, hardware systems with a…
|
5.9
Moyenne
|
15 oct. 2025 |
| CVE-2025-48008 |
When a TCP profile with Multipath TCP (MPTCP) enabled is configured on a virtual server, undisclosed traffic along…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-59478 |
When a BIG-IP AFM denial-of-service (DoS) protection profile is configured on a virtual server, undisclosed requests can…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-58474 |
When BIG-IP Advanced WAF is configured on a virtual server with Server-Side Request Forgery (SSRF) protection or when an…
|
5.3
Moyenne
|
15 oct. 2025 |
| CVE-2025-59269 |
A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that…
|
6.1
Moyenne
|
15 oct. 2025 |
| CVE-2025-59268 |
On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an…
|
5.3
Moyenne
|
15 oct. 2025 |
| CVE-2025-47148 |
When the BIG-IP system is configured as both a Security Assertion Markup Language (SAML) service provider (SP) and…
|
6.5
Moyenne
|
15 oct. 2025 |
| CVE-2025-53474 |
When an iRule using an ILX::call command is configured on a virtual server, undisclosed traffic can cause the Traffic…
|
7.5
Élevée
|
15 oct. 2025 |
| CVE-2025-54500 |
An HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to…
|
5.3
Moyenne
|
13 août 2025 |
| CVE-2025-46405 |
When Network Access is configured on a BIG-IP APM virtual server, undisclosed traffic can cause the Traffic Management…
|
7.5
Élevée
|
13 août 2025 |
| CVE-2025-48500 |
A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local,…
|
7.3
Élevée
|
13 août 2025 |
| CVE-2025-52585 |
When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous…
|
7.5
Élevée
|
13 août 2025 |
| CVE-2025-41431 |
When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management…
|
7.5
Élevée
|
7 mai 2025 |
| CVE-2025-36525 |
When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to…
|
7.5
Élevée
|
7 mai 2025 |
| CVE-2025-35995 |
When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the…
|
7.5
Élevée
|
7 mai 2025 |
| CVE-2025-31644 |
Appliance mode BIG-IP iControl REST and tmsh vulnerability
|
8.7
Élevée
|
7 mai 2025 |
| CVE-2025-41433 |
When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is…
|
7.5
Élevée
|
7 mai 2025 |
| CVE-2025-41414 |
When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to…
|
7.5
Élevée
|
7 mai 2025 |
| CVE-2025-36504 |
When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase…
|
7.5
Élevée
|
7 mai 2025 |
| CVE-2025-41399 |
When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can…
|
7.5
Élevée
|
7 mai 2025 |
| CVE-2025-36557 |
When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests…
|
7.5
Élevée
|
7 mai 2025 |
| CVE-2025-20029 |
Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an…
|
8.8
Élevée
|
5 févr. 2025 |
| CVE-2025-24497 |
When URL categorization is configured on a virtual server, undisclosed requests can cause TMM to terminate. Note:…
|
7.5
Élevée
|
5 févr. 2025 |