PT-2025-42373

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Traffic Management Microkernel TMM affected versions not specified Description Undisclosed traffic on a multi-bladed platform can cause the Traffic Management Microkernel TMM to terminate. This issue affects systems with more than on...

PT-2025-42341

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified F5 NGINX versions affected versions not specified Description When BIG-IP Advanced WAF is configured on a virtual server with Server-Side Request Forgery SSRF protection, or when an NGINX serv...

F5 BIG-IP Resource Management Error Vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A resource management error vulnerability exists in the F5 BIG-IP, which stems from the fact that MPTCP-enabled TCP configurations can cause T...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. An elevation of privilege vulnerability exists in the BIG-IP's iControl REST and TMOS Shell tmsh modules. The vulnerability...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A denial-of-service vulnerability exists in the ePVA module of BIG-IP. The vulnerability arises due to undisclosed traffic tha...

F5 BIG-IP Buffer Error Vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A buffer error vulnerability exists in F5 BIG-IP that stems from an undisclosed request that could cause the TMM process to terminate...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in the F5 BIG-IP that originates when configuring security policies and server-side HTTP/2 profiles, where...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in F5 BIG-IP that stems from undisclosed traffic that could lead to TMM termination...

PT-2025-42324

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified Description An issue exists in F5 BIG-IP’s Traffic Management Microkernel TMM where specific traffic, when processed by an iRule utilizing the ILX::call command, can lead to TMM termination...

PT-2025-42371

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM affected versions not specified Description A reflected cross-site scripting XSS issue exists on an unspecified page within BIG-IP APM. This allows an attacker to execute JavaScript code within the security context of a user who ...

PT-2025-42334

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Advanced WAF and ASM affected versions not specified Description When configured with a server-side HTTP/2 profile and a security policy, the Traffic Management Microkernel TMM may terminate due to undisclosed traffic. This can lead ...

PT-2025-42353

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description An out-of-bounds read within the Traffic Management Microkernel TMM component can lead to a denial-of-service condition. This issue arises when a Datagram Transport Layer Security DTLS 1.2...

PT-2025-42338

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Next versions affected versions not specified Description A flaw exists in the HTTP/2 Ingress component of F5 BIG-IP Next, where undisclosed traffic can lead to the termination of the Traffic Management Microkernel TMM. This can...

PT-2025-42356

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM affected versions not specified Description An issue exists where undisclosed traffic, when interacting with a per-request policy configured on a BIG-IP APM portal access virtual server, can cause the Traffic Management Microkern...

F5 F5OS-A and F5 F5OS-C security vulnerabilities

F5 F5OS-A and F5 F5OS-C are both products of F5 Corporation, U.S.A. F5 F5OS-A is an operating system software.F5 F5OS-C is an operating system software on VELOS hardware. A security vulnerability exists in F5 F5OS-A and F5 F5OS-C that stems from an undisclosed request that could result in increas...

PT-2025-42348

Name of the Vulnerable Software and Affected Versions F5 BIG-IP and BIG-IP Next CNF affected versions not specified Description Undisclosed DNS queries can lead to increased memory resource utilization when the DNS cache is configured on a virtual server. This issue affects BIG-IP and BIG-IP Next...

PT-2025-42326

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified Description An issue exists in F5 BIG-IP systems utilizing the embedded Packet Velocity Acceleration ePVA feature. Undisclosed traffic can lead to the termination of the Traffic Management...

PT-2025-42345

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to the fixed version Description A security issue exists in the iControl REST and BIG-IP TMOS Shell tmsh command that could allow an authenticated attacker with resource administrator privileges to execute arbitrary...

PT-2025-42323

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description When a TCP profile with Multipath TCP MPTC enabled is configured on a virtual server, undisclosed traffic, along with conditions beyond the attacker's control, can cause the Traffic...

CVE-2025-60016: Improper Restriction of Operations within the Bounds of a Memory Buffer

When Diffie-Hellman DH group Elliptic Curve Cryptography ECC Brainpool curves are configured in an SSL profile's Cipher Rule or Cipher Group, and that profile is applied to a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions...