CVE-2025-35995

🗓️ 07 May 2025 22:04:10Reported by f5Type

BIG-IP PEM vulnerability allows request termination due to URL categorization policy enabled.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2025-35995	7 May 202522:23	–	circl
CNNVD	F5 BIG-IP PEM 缓冲区错误漏洞	7 May 202500:00	–	cnnvd
Cvelist	CVE-2025-35995 BIG-IP PEM vulnerability	7 May 202522:04	–	cvelist
EUVD	EUVD-2025-13937	3 Oct 202520:07	–	euvd
F5 Networks	K000149952: BIG-IP PEM vulnerability CVE-2025-35995	7 May 202512:55	–	f5
F5 Networks	K000151008: Quarterly Security Notification (May 2025)	7 May 202513:44	–	f5
Tenable Nessus	F5 Networks BIG-IP : BIG-IP PEM vulnerability (K000149952)	7 May 202500:00	–	nessus
NCSC	Vulnerabilities fixed in F5 BIG-IP	9 May 202508:07	–	ncsc
NVD	CVE-2025-35995	7 May 202522:15	–	nvd
Positive Technologies	PT-2025-20301 · F5 · Big-Ip Pem	7 May 202500:00	–	ptsecurity

NVD

Node

f5 big-ip_policy_enforcement_managerRange15.1.0–15.1.10.7.0.4.5

f5 big-ip_policy_enforcement_managerRange16.1.0–16.1.6

f5 big-ip_policy_enforcement_managerRange17.1.0–17.1.2.2

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "BIG-IP PEM"
    ],
    "product": "BIG-IP",
    "vendor": "F5",
    "versions": [
      {
        "lessThan": "*",
        "status": "unaffected",
        "version": "17.5.0",
        "versionType": "custom"
      },
      {
        "lessThan": "17.1.2.2",
        "status": "affected",
        "version": "17.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "16.1.6",
        "status": "affected",
        "version": "16.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "*",
        "status": "affected",
        "version": "15.1.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
my	www.my.f5.com/manage/s/article/K000149952

29 Sep 2025 21:30Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

CVSS 48.7

EPSS0.00569

SSVC

CWE-125