K000148816: BIG-IP APM and SSL Orchestrator vulnerability CVE-2025-47148

Security Advisory Description When the BIG-IP system is configured as both a Security Assertion Markup Language SAML service provider SP and Identity Provider IdP, with single logout SLO enabled on an access policy, undisclosed requests can cause an increase in memory resource utilization...

K000150637: BIG-IP DNS cache vulnerability CVE-2025-59781

Security Advisory Description When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilization. CVE-2025-59781 Impact System performance can degrade until the Traffic Management Microkernel TMM process is eith...

K000150614: BIG-IP MPTCP vulnerability CVE-2025-48008

Security Advisory Description When a TCP profile with Multipath TCP MPTCP enabled is configured on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel TMM to terminate. CVE-2025-48008 Impact Traffic is disrupted...

K000156597: BIG-IP APM portal access vulnerability CVE-2025-61960

Security Advisory Description When a per-request policy is configured on a BIG-IP APM portal access virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. CVE-2025-61960 Impact Traffic is disrupted while the TMM process restarts. This vulnerability allo...

K90301300: BIG-IP Configuration utility vulnerability CVE-2025-59268

Security Advisory Description On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated remote attacker through the Configuration utility. CVE-2025-59268 Impact This vulnerability may allow an unauthenticated attacker with netwo...

K000156801: BIG-IP Configuration utility vulnerability CVE-2025-54755

Security Advisory Description A directory traversal vulnerability exists in the BIG-IP Configuration utility that allows a highly privileged authenticated attacker to access files which are not limited to the intended files. CVE-2025-54755 Impact A highly privileged authenticated attacker may...

K000151308: BIG-IP Configuration utility XSS vulnerability CVE-2025-59269

Security Advisory Description A stored cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. CVE-2025-59269 Impact An authenticated attacker with at least t...

K000156642: BIG-IP iControl REST and tmsh vulnerability CVE-2025-59481

Security Advisory Description A vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell tmsh command that may allow an authenticated attacker with at least the resource administrator role to execute arbitrary system commands with higher privileges. A successful exploit can allo...

K000156624: BIG-IP Advanced WAF and ASM bd process vulnerability CVE-2025-61938

Security Advisory Description When a BIG-IP Advanced WAF or ASM security policy is configured with a URL greater than 1024 characters in length for the Data Guard Protection Enforcement setting, either manually or through the automatic Policy Builder, the bd process can terminate repeatedly...

F5 BIG-IP和F5 SSL Orchestrator 缓冲区错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A memory corruption vulnerability exists in the Explicit Forward Proxy module of the BIG-IP SSL Orchestrator. The vulnerabilit...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in F5 BIG-IP that stems from an undisclosed request that could result in the termination of the bd process...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in the F5 BIG-IP that originates when configuring security policies and server-side HTTP/2 profiles, where...

F5 BIG-IP 缓冲区错误漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. A buffer error vulnerability exists in F5 BIG-IP, which stems from an improperly configured OAuth access profile that could...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in F5 BIG-IP that stems from a directory traversal vulnerability that could allow an authenticated attacker to...

F5 Networks BIG-IP : BIG-IP Advanced WAF and ASM vulnerability (K000154664)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 17.1.3 / 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K000154664 advisory. When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests...

F5 Networks BIG-IP : BIG-IP Configuration utility XSS vulnerability (K000151308)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.3 / 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K000151308 advisory. A stored cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP...

F5 Networks BIG-IP : BIG-IP HSB vulnerability (K000151658)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.0 / 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K000151658 advisory. Under undisclosed traffic conditions along with conditions beyond the attacker's control,...

F5 Networks BIG-IP : BIG-IP SSL Orchestrator vulnerability (K000151368)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6 / 17.1.3. It is, therefore, affected by a vulnerability as referenced in the K000151368 advisory. When BIG-IP SSL Orchestrator explicit forward proxy is configured on a virtual server and the proxy conne...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A data tampering vulnerability exists in the TMM module of BIG-IP, which arises because undisclosed traffic can lead to data...

F5 BIG-IP 安全漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A denial-of-service vulnerability exists in the IPsec module of BIG-IP, which can be exploited to cause the termination of the...