EUVD-2025-34623

A validation vulnerability exists in an undisclosed URL in the Configuration utility. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-59483 BIG-IP Configuration utility and tmsh vulnerability

A validation vulnerability exists in an undisclosed URL in the Configuration utility. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-59483

CVE-2025-59483 is a vulnerability in the BIG-IP Configuration utility where an arbitrary file upload can be performed by an authenticated, highly privileged attacker (CWE-73: External Control of File Name or Path). The Red Hat advisory confirms a control plane issue with a vulnerability class tha...

CVE-2025-59268 BIG-IP Configuration utility vulnerability

On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated remote attacker through the Configuration utility. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-59269

CVE-2025-59269 is a stored cross-site scripting (XSS) vulnerability in BIG-IP Configuration utility. It affects BIG-IP (all modules) and stems from insufficient input handling on an undisclosed page, allowing an attacker to store and execute JavaScript in the context of the currently logged-in us...

CVE-2025-59268

On BIG-IP, CVE-2025-59268 affects the Configuration utility: undisclosed endpoints that serve static non-sensitive information are reachable by an unauthenticated remote attacker, resulting in potential information disclosure. The issue is a control-plane exposure with no data-plane impact report...

CVE-2025-59268 BIG-IP Configuration utility vulnerability

On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated remote attacker through the Configuration utility. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-59269 BIG-IP Configuration utility XSS vulnerability

A stored cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-59269 BIG-IP Configuration utility XSS vulnerability

A stored cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

K000156800: BIG-IP Configuration utility vulnerability CVE-2025-59483

Security Advisory Description An arbitrary file upload vulnerability exists in an undisclosed URL in the Configuration utility. CVE-2025-59483 Impact A highly privileged authenticated attacker may be able to exploit this vulnerability to upload arbitrary files. This is a control plane issue; ther...

K90301300: BIG-IP Configuration utility vulnerability CVE-2025-59268

Security Advisory Description On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated remote attacker through the Configuration utility. CVE-2025-59268 Impact This vulnerability may allow an unauthenticated attacker with netwo...

K000156801: BIG-IP Configuration utility vulnerability CVE-2025-54755

Security Advisory Description A directory traversal vulnerability exists in the BIG-IP Configuration utility that allows a highly privileged authenticated attacker to access files which are not limited to the intended files. CVE-2025-54755 Impact A highly privileged authenticated attacker may...

K000151308: BIG-IP Configuration utility XSS vulnerability CVE-2025-59269

Security Advisory Description A stored cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. CVE-2025-59269 Impact An authenticated attacker with at least t...

F5 Networks BIG-IP : BIG-IP Configuration utility XSS vulnerability (K000151308)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.3 / 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K000151308 advisory. A stored cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP...

CVE-2025-59268: Insertion of Sensitive Information Into Sent Data

On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated remote attacker through the Configuration utility. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K90301300)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.3 / 17.5.1.3. It is, therefore, affected by a vulnerability as referenced in the K90301300 advisory. On the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are...

F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K000156801)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.3 / 17.5.1.3. It is, therefore, affected by a vulnerability as referenced in the K000156801 advisory. A directory traversal vulnerability exists in the BIG-IP Configuration utility that allows a...

CVE-2025-59483: External Control of File Name or Path

A validation vulnerability exists in an undisclosed URL in the Configuration utility. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

PT-2025-42346

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A validation vulnerability exists in an undisclosed URL within the Configuration utility. The vulnerability concerns an input validation issue. Recommendations ...

CVE-2025-59269: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...