PT-2025-42355

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to the fixed version Description A security issue exists in the iHealth command that could allow an authenticated attacker with resource administrator privileges to bypass tmsh restrictions and gain access to a bash...

PT-2025-42324

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified Description An issue exists in F5 BIG-IP’s Traffic Management Microkernel TMM where specific traffic, when processed by an iRule utilizing the ILX::call command, can lead to TMM termination...

PT-2025-42334

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Advanced WAF and ASM affected versions not specified Description When configured with a server-side HTTP/2 profile and a security policy, the Traffic Management Microkernel TMM may terminate due to undisclosed traffic. This can lead ...

PT-2025-42353

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description An out-of-bounds read within the Traffic Management Microkernel TMM component can lead to a denial-of-service condition. This issue arises when a Datagram Transport Layer Security DTLS 1.2...

PT-2025-42344

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions affected versions not specified Description A flaw exists in the BIG-IP Application Firewall Manager AFM when a DoS protection profile is configured on a virtual server. Undisclosed requests can lead to the termination of th...

PT-2025-42371

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM affected versions not specified Description A reflected cross-site scripting XSS issue exists on an unspecified page within BIG-IP APM. This allows an attacker to execute JavaScript code within the security context of a user who ...

PT-2025-42373

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Traffic Management Microkernel TMM affected versions not specified Description Undisclosed traffic on a multi-bladed platform can cause the Traffic Management Microkernel TMM to terminate. This issue affects systems with more than on...

PT-2025-42380

Name of the Vulnerable Software and Affected Versions Cisco Desk Phone 9800 Series Cisco IP Phone 7800 and 8800 Series Cisco Video Phone 8875 Description A flaw exists in the web UI of the affected devices running Cisco SIP Software that may allow a remote attacker to perform cross-site scripting...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A data tampering vulnerability exists in the TMM module of BIG-IP, which arises because undisclosed traffic can lead to data...

F5 BIG-IP Next SPK code issue vulnerability

F5 BIG-IP Next SPK is a cloud-native application traffic management solution from F5 USA. A code issue vulnerability exists in F5 BIG-IP Next SPK, which stems from the possibility that undisclosed traffic in an HTTP/2 Ingress configuration could lead to the termination of the Traffic Management...

F5 BIG-IPI and F5 SSL Orchestrator buffer error vulnerabilities

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A memory corruption vulnerability exists in the Explicit Forward Proxy module of the BIG-IP SSL Orchestrator. The vulnerabilit...

F5 BIG-IP Code Issue Vulnerabilities

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A code issue vulnerability exists in F5 BIG-IP that stems from the configuration of a per-request policy where undisclosed traffic could cause...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in F5 BIG-IP that stems from a directory traversal vulnerability that could allow an authenticated attacker to...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in F5 BIG-IP that stems from an undisclosed request that could lead to an increase in memory resource...

F5 BIG-IP security vulnerabilities

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, and load balancing from F5 USA. A security vulnerability exists in F5 BIG-IP that stems from repeated undisclosed API calls that could cause the Traffic Management Microkerne...

PT-2025-42352

Name of the Vulnerable Software and Affected Versions BIG-IP Advanced WAF or ASM affected versions not specified Description When a BIG-IP Advanced WAF or ASM security policy is configured with a URL exceeding 1024 characters in length for the Data Guard Protection Enforcement setting, the bd...

F5 Networks BIG-IP : BIG-IP iRules vulnerability (K000151611)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.6 / 17.1.2.2 / 17.5.0. It is, therefore, affected by a vulnerability as referenced in the K000151611 advisory. When an iRule containing theHTTP::respondcommand is configured on a virtual server, undisclosed requests c...

F5 Networks BIG-IP : BIG-IP SSL Orchestrator vulnerability (K000151368)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6 / 17.1.3. It is, therefore, affected by a vulnerability as referenced in the K000151368 advisory. When BIG-IP SSL Orchestrator explicit forward proxy is configured on a virtual server and the proxy conne...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K000156912)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.3 / 17.5.1.3. It is, therefore, affected by a vulnerability as referenced in the K000156912 advisory. When using a multi-bladed platform with more than one active blade, undisclosed traffic can...

F5 Networks BIG-IP : BIG-IP TMM vulnerability (K000156691)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.3 / 17.5.1.3. It is, therefore, affected by a vulnerability as referenced in the K000156691 advisory. When the database variabletm.tcpudptxchecksumis configured as non-default valueSoftware-only...