Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: F5 BIG-IP Next CNF 1.4.0 Clear all filters
TI-2025-24852 CVE-2025-36504 · GHSA-x2q2-p7cx-c4pf

BIG-IP HTTP/2 vulnerability

Priority MEDIUM 44

When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00445 Published 2025-05-07 Fixed in 17.5.0, 17.1.2 +5 CWE-770
TI-2025-27583 CVE-2025-41414 · GHSA-v537-5483-5jm6

BIG-IP HTTP/2 vulnerability

Priority MEDIUM 44

When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00438 Published 2025-05-07 Fixed in 17.5.0, 17.1.2 +4 CWE-476
TI-2025-24875 CVE-2025-36557 · GHSA-7prc-7h82-9785

BIG-IP HTTP vulnerability

Priority MEDIUM 44

When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00438 Published 2025-05-07 Fixed in 17.5.0, 17.1.2 +5 CWE-120