TI-2025-35914 CVE-2025-58071 · GHSA-8p6j-p6mq-v3m8
BIG-IP IPSec vulnerability
Priority MEDIUM 44
When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.
Vulnerabilities
4 records
TI-2025-34276 CVE-2025-54479 · GHSA-c2h5-9wrr-3f73
BIG-IP PEM vulnerability
Priority MEDIUM 44
When a classification profile is configured on a virtual server without an HTTP or HTTP/2 profile, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.
TI-2025-29737 CVE-2025-47148 · GHSA-94mj-cc39-hffh
BIG-IP APM and SSL Orchestrator vulnerability
Priority LOW 31
When the BIG-IP system is configured as both a Security Assertion Markup Language (SAML) service provider (SP) and Identity Provider (IdP), with single logout (SLO) enabled on an access policy, undisclosed requests can c…
TI-2025-36849 CVE-2025-59269 · GHSA-22m6-79rr-hjr4
BIG-IP Configuration utility XSS vulnerability
Priority LOW 38
A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user.