CVE-2025-47148 BIG-IP APM and SSL Orchestrator vulnerability

🗓️ 15 Oct 2025 13:55:42Reported by f5Type

CVE-2025-47148 affects BIG-IP APM and SSL Orchestrator when configured as both Security Assertion Markup Language provider and Identity Provider with single logout, causing memory usage increase.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-47148	16 Oct 202504:20	–	circl
CNNVD	F5 BIG-IP 安全漏洞	15 Oct 202500:00	–	cnnvd
CVE	CVE-2025-47148	15 Oct 202513:55	–	cve
EUVD	EUVD-2025-34655	15 Oct 202515:30	–	euvd
F5 Networks	K000148816: BIG-IP APM and SSL Orchestrator vulnerability CVE-2025-47148	15 Oct 202510:33	–	f5
Tenable Nessus	F5 Networks BIG-IP : BIG-IP APM and SSL Orchestrator vulnerability (K000148816)	15 Oct 202500:00	–	nessus
NCSC	Vulnerabilities fixed in F5 Networks BIG-IP, F5OS and NGINX App Protect WAF	27 Mar 202618:09	–	ncsc
NVD	CVE-2025-47148	15 Oct 202514:15	–	nvd
Qualys Blog	A Strategic Response to the F5 BIG-IP Nation-State Breach 2025	18 Oct 202500:49	–	qualysblog
RedhatCVE	CVE-2025-47148	16 Oct 202514:51	–	redhatcve

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "APM",
      "SWG",
      "SSLO"
    ],
    "product": "BIG-IP",
    "vendor": "F5",
    "versions": [
      {
        "lessThan": "17.5.1",
        "status": "affected",
        "version": "17.5.0",
        "versionType": "custom"
      },
      {
        "lessThan": "17.1.3",
        "status": "affected",
        "version": "17.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "16.1.6.1",
        "status": "affected",
        "version": "16.1.0",
        "versionType": "custom"
      },
      {
        "lessThan": "15.1.10.8",
        "status": "affected",
        "version": "15.1.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
my	www.my.f5.com/manage/s/article/K000148816

15 Oct 2025 13:55Current

CVSS 3.16.5

CVSS 47.1

EPSS0.00087

CWE-404