Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: F5 BIG-IP 15.1.10.8, 16.1.6, 17.1.2.2 Clear all filters
TI-2025-36185 CVE-2025-58424 · GHSA-vw9r-c6xc-fpxh

BIG-IP TMM vulnerability

Priority LOW 28

On BIG-IP systems, undisclosed traffic can cause data corruption and unauthorized data modification in protocols which do not have message integrity protection.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00246 Published 2025-10-15 Fixed in 17.5.0, 17.1.2.2 +2 CWE-340
TI-2025-37232 CVE-2025-59781 · GHSA-q38q-hvv8-223h

BIG-IP DNS cache vulnerability

Priority MEDIUM 44

When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilization.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00348 Published 2025-10-15 Fixed in 17.5.0, 17.1.2.2 +3 CWE-459
TI-2025-30392 CVE-2025-48008 · GHSA-gq9q-m2j6-54f2

BIG-IP MPTCP vulnerability

Priority MEDIUM 44

When a TCP profile with Multipath TCP (MPTCP) enabled is configured on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel (TMM) to termi…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00444 Published 2025-10-15 Fixed in 17.5.0, 17.1.2.2 +3 CWE-416