F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A denial-of-service vulnerability exists in the SSL/TLS module of BIG-IP. The vulnerability arises because when configuring a...

F5 BIG-IP Cross-Site Script Vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. A cross-site scripting vulnerability exists in F5 BIG-IP that stems from the presence of reflective cross-site scripting on an...

PT-2025-42330

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description An issue exists where, when an iRule is configured on a virtual server via the declarative API, the cleanup process during re-instantiation can lead to increased Traffic Management...

PT-2025-42369

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description When IPsec is configured, certain traffic can lead to the termination of the Traffic Management Microkernel TMM. This issue does not affect software versions that have reached End of...

PT-2025-42337

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified Description A flaw in the Traffic Management Microkernel TMM can lead to denial of service. When the database variable tm.tcpudptxchecksum is configured with a non-default value on a BIG-IP...

PT-2025-42372

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Advanced WAF versions affected versions not specified F5 BIG-IP ASM versions affected versions not specified Description A configuration issue in F5 BIG-IP Advanced WAF or ASM security policies on a virtual server can lead to the...

PT-2025-42320

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description An iRule configured with the HTTP::respond command on a virtual server may lead to increased memory resource utilization due to undisclosed requests. Recommendations At the moment, there is...

F5 BIG-IP Buffer Error Vulnerability

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. A buffer error vulnerability exists in F5 BIG-IP, which stems from an improperly configured OAuth access profile that could...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. An elevation of privilege vulnerability exists in the BIG-IP's iControl REST and TMOS Shell tmsh modules. The vulnerability...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A memory resource management vulnerability exists in the TMM module of BIG-IP Next. The vulnerability arises because after...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A denial-of-service vulnerability exists in the ePVA module of BIG-IP. The vulnerability arises due to undisclosed traffic tha...

PT-2025-42341

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified F5 NGINX versions affected versions not specified Description When BIG-IP Advanced WAF is configured on a virtual server with Server-Side Request Forgery SSRF protection, or when an NGINX serv...

PT-2025-42342

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description An unauthenticated remote attacker can access undisclosed endpoints containing static non-sensitive information through the Configuration utility on the BIG-IP system. Recommendations At th...

PT-2025-42328

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified Description A flaw exists in the Traffic Management Microkernel TMM of F5 BIG-IP. When a classification profile is configured on a virtual server lacking an HTTP or HTTP/2 profile, unspecified...

PT-2025-42321

Name of the Vulnerable Software and Affected Versions BIG-IP versions affected versions not specified Description The BIG-IP system, when configured as both a Security Assertion Markup Language SAML service provider SP and Identity Provider IdP with single logout SLO enabled on an access policy,...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A denial-of-service vulnerability exists in the IPsec module of BIG-IP, which can be exploited to cause the termination of the...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in F5 BIG-IP that stems from an undisclosed request that could result in the termination of the bd process...

PT-2025-42327

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified Description A privileged, authenticated attacker with access to SCP and SFTP may bypass Appliance mode restrictions using undisclosed commands when the software is running in Appliance mode...

PT-2025-42379

Name of the Vulnerable Software and Affected Versions Cisco Desk Phone 9800 Series Cisco IP Phone 7800 Series Cisco IP Phone 8800 Series Cisco Video Phone 8875 Description A flaw exists in the web UI of the listed Cisco phone series running Cisco SIP Software that could allow a remote,...

PT-2025-42340

Name of the Vulnerable Software and Affected Versions BIG-IP systems affected versions not specified Description Undisclosed traffic can lead to data corruption and unauthorized data modification in protocols lacking message integrity protection. Software versions that have reached End of Technic...