F5 BIG-IP Buffer Error Vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing and other features from F5 USA. A buffer error vulnerability exists in F5 BIG-IP that originates from a misconfiguration of the DTLS 1.2 virtual server when th...

PT-2025-42357

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description An issue exists where, when a client SSL profile is configured on a virtual server, certain requests can lead to increased memory resource utilization. The nature of these requests is not...

CVE-2025-53860: Invocation of Process Using Visible Sensitive Information

A vulnerability exists in F5OS-A software that allows a highly privileged authenticated attacker to access sensitive FIPS hardware security module HSM information on F5 rSeries systems. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

PT-2025-42331

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM OAuth affected versions not specified Description An out-of-bounds read issue exists in F5 BIG-IP APM OAuth, potentially leading to the leakage of sensitive memory data. When an OAuth access profile Resource Server or Resource...

F5 BIG-IPI and F5 SSL Orchestrator buffer error vulnerabilities

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A memory corruption vulnerability exists in the Explicit Forward Proxy module of the BIG-IP SSL Orchestrator. The vulnerabilit...

PT-2025-42347

Name of the Vulnerable Software and Affected Versions F5 VELOS F5OS-C versions affected versions not specified Description A resource allocation flaw exists in the F5 VELOS F5OS-C partition control plane. When the Allowed IP Addresses feature is configured, undisclosed traffic can cause container...

PT-2025-42333

Name of the Vulnerable Software and Affected Versions F5 BIG-IP SSL Orchestrator affected versions not specified Description A flaw exists in F5 BIG-IP SSL Orchestrator where undisclosed traffic, when the explicit forward proxy is configured on a virtual server with the proxy connect feature...

PT-2025-42355

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to the fixed version Description A security issue exists in the iHealth command that could allow an authenticated attacker with resource administrator privileges to bypass tmsh restrictions and gain access to a bash...

PT-2025-42330

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description An issue exists where, when an iRule is configured on a virtual server via the declarative API, the cleanup process during re-instantiation can lead to increased Traffic Management...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in F5 BIG-IP that stems from an undisclosed request that could lead to an increase in memory resource...

F5 BIG-IP Buffer Error Vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A buffer error vulnerability exists in F5 BIG-IP that stems from a specially crafted request that could cause the Traffic Management Microkern...

F5 F5OS-A and F5 F5OS-C security vulnerabilities

F5 F5OS-A and F5 F5OS-C are both products of F5 Corporation, U.S.A. F5 F5OS-A is an operating system software.F5 F5OS-C is an operating system software on VELOS hardware. A security vulnerability exists in F5 F5OS-A and F5 F5OS-C that originates from an authenticated attacker being able to elevat...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A data tampering vulnerability exists in the TMM module of BIG-IP, which arises because undisclosed traffic can lead to data...

F5 Networks BIG-IP : BIG-IP HSB vulnerability (K000151658)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.0 / 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K000151658 advisory. Under undisclosed traffic conditions along with conditions beyond the attacker's control,...

PT-2025-42344

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified Description A flaw exists in the BIG-IP Application Firewall Manager AFM when a DoS protection profile is configured on a virtual server. Undisclosed requests can lead to the termination of th...

PT-2025-42319

Name of the Vulnerable Software and Affected Versions F5 BIG-IP SSL Orchestrator affected versions not specified Description When SSL Orchestrator is enabled, certain traffic can lead to the termination of the Traffic Management Microkernel TMM, resulting in a denial-of-service condition. This...

PT-2025-42372

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Advanced WAF versions affected versions not specified F5 BIG-IP ASM versions affected versions not specified Description A configuration issue in F5 BIG-IP Advanced WAF or ASM security policies on a virtual server can lead to the...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A denial-of-service vulnerability exists in the IPsec module of BIG-IP, which can be exploited to cause the termination of the...

CVE-2025-54805: Missing Release of Memory after Effective Lifetime

When an iRule is configured on a virtual server via the declarative API, upon re-instantiation, the cleanup process can cause an increase in the Traffic Management Microkernel TMM memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS are not...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in F5 BIG-IP that stems from repeated undisclosed API calls that could cause the Traffic Management Microkerne...