Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: F5 BIG-IP 16.1.5, 17.1.2 Clear all filters
TI-2025-16726 CVE-2025-22846 · GHSA-qgr7-xw3q-mxrv

BIG-IP SIP Vulnerability

Priority MEDIUM 44

When SIP Session and Router ALG profiles are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00408 Published 2025-02-05 Fixed in 17.1.2, 16.1.5 +2 CWE-404
TI-2025-17179 CVE-2025-23412 · GHSA-c7xm-3c9x-23p2

BIG-IP APM access profile vulnerability

Priority MEDIUM 44

When BIG-IP APM Access Profile is configured on a virtual server, undisclosed request can cause TMM to terminate.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00408 Published 2025-02-05 Fixed in 17.1.2, 16.1.5 +1 CWE-120
TI-2025-18070 CVE-2025-24326 · GHSA-7vr5-hcj8-96h7

BIG-IP Advanced WAF/ASM BADoS vulnerability

Priority MEDIUM 45

When BIG-IP Advanced WAF/ASM Behavioral DoS (BADoS) TLS Signatures feature is configured, undisclosed traffic can case an increase in memory resource utilization.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00408 Published 2025-02-05 Fixed in 17.1.2, 16.1.5 CWE-787
TI-2025-14354 CVE-2025-20045 · GHSA-g7gf-f662-24xm

BIG-IP SIP MRF Vulnerability

Priority MEDIUM 44

When SIP session Application Level Gateway mode (ALG) profile with Passthru Mode enabled and SIP router ALG profile are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Manag…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00408 Published 2025-02-05 Fixed in 17.1.2, 16.1.5 CWE-476
TI-2025-16757 CVE-2025-22891 · GHSA-892q-vr75-r4j3

BIG-IP PEM Vulnerability

Priority MEDIUM 44

When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an increase in memory res…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00408 Published 2025-02-05 Fixed in 17.1.2, 16.1.5 CWE-772
TI-2025-17182 CVE-2025-23415 · GHSA-rh2h-7w4m-mhhp

BIG-IP APM Endpoint Inspection vulnerability

Priority LOW 11

An insufficient verification of data authenticity vulnerability exists in BIG-IP APM Access Policy endpoint inspection that may allow an attacker to bypass endpoint inspection checks for VPN connection initiated thru BIG…

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00139 Published 2025-02-05 Fixed in 17.1.2, 16.1.5 CWE-345