Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: F5 BIG-IP 17.1.2 Clear all filters
TI-2025-37392 CVE-2025-60016 · GHSA-2h32-w2mf-v4c7

BIG-IP SSL/TLS vulnerability

Priority MEDIUM 44

When Diffie-Hellman (DH) group Elliptic Curve Cryptography (ECC) Brainpool curves are configured in an SSL profile's Cipher Rule or Cipher Group, and that profile is applied to a virtual server, undisclosed traffic can c…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00444 Published 2025-10-15 Fixed in 17.5.0, 17.1.2 +4 CWE-119
TI-2025-36231 CVE-2025-58474 · GHSA-9v7m-8h7x-fp6q

BIG-IP Advanced WAF and ASM and NGINX App Protect DNS lookup vulnerability

Priority LOW 37

When BIG-IP Advanced WAF is configured on a virtual server with Server-Side Request Forgery (SSRF) protection or when an NGINX server is configured with App Protect Bot Defense, undisclosed requests can disrupt new clien…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00388 Published 2025-10-15 Fixed in 17.5.0, 17.1.2 +4 CWE-770