Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

TI-2025-18218 CVE-2025-24497 · GHSA-8253-7fvw-x3gr

BIG-IP PEM vulnerability

Priority MEDIUM 44

When URL categorization is configured on a virtual server, undisclosed requests can cause TMM to terminate.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00408 Published 2025-02-05 Fixed in 17.1.2, 16.1.0 +1 CWE-125
TI-2025-18057 CVE-2025-24312 · GHSA-7qw3-c2vm-fjhq

BIG-IP AFM vulnerability

Priority MEDIUM 44

When BIG-IP AFM is provisioned with IPS module enabled and protocol inspection profile is configured on a virtual server or firewall rule or policy, undisclosed traffic can cause an increase in CPU resource utilization.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00401 Published 2025-02-05 Fixed in 17.1.2, 1.4.0 CWE-770
TI-2025-17015 CVE-2025-23239 · GHSA-47pf-mc42-q29m

BIG-IP iControl REST vulnerability

Priority MEDIUM 40

When running in Appliance mode, and logged into a highly-privileged role, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint.

CVSS 4.0HIGH 8.5 Network High privileges No interaction EPSS 0.00762 Published 2025-02-05 Fixed in 17.1.2, 16.1.0 +1 CWE-77
TI-2025-14367 CVE-2025-20058 · GHSA-848g-9jpp-6w84

BIG-IP message routing vulnerability

Priority MEDIUM 45

When a BIG-IP message routing profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00408 Published 2025-02-05 Fixed in 17.1.2 CWE-400
TI-2025-15087 CVE-2025-21091 · GHSA-86qr-6525-5m7v

BIG-IP SNMP vulnerability

Priority MEDIUM 44

When SNMP v1 or v2c are disabled on the BIG-IP, undisclosed requests can cause an increase in memory resource utilization.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00452 Published 2025-02-05 Fixed in 17.1.2 CWE-401
TI-2025-15083 CVE-2025-21087 · GHSA-2mpq-2v9j-3j3j

TMM Vulnerability

Priority MEDIUM 45

When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed traffic can cause an increase in memory and CPU resource utilization.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00408 Published 2025-02-05 Fixed in 17.1.2, 20.1.0 CWE-400