Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: F5 BIG-IP 16.1.5, 17.1.2 Clear all filters
TI-2025-27583 CVE-2025-41414 · GHSA-v537-5483-5jm6

BIG-IP HTTP/2 vulnerability

Priority MEDIUM 44

When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00438 Published 2025-05-07 Fixed in 17.5.0, 17.1.2 +4 CWE-476
TI-2025-27597 CVE-2025-41433 · GHSA-h5pv-2m79-7p5p

BIG-IP SIP ALG profile vulnerability

Priority MEDIUM 44

When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Mi…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00445 Published 2025-05-07 Fixed in 17.5.0, 17.1.2 +1 CWE-476
TI-2025-24875 CVE-2025-36557 · GHSA-7prc-7h82-9785

BIG-IP HTTP vulnerability

Priority MEDIUM 44

When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00438 Published 2025-05-07 Fixed in 17.5.0, 17.1.2 +5 CWE-120