F5

Big-ip Access Policy Manager

589 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.7

CVE-2025-23239

  • EPSS 0.35%
  • Veröffentlicht 05.02.2025 18:15:31
  • Zuletzt bearbeitet 04.02.2026 17:47:11

When running in Appliance mode, and logged into a highly-privileged role, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a security boundar...

8.7

CVE-2025-23412

  • EPSS 0.48%
  • Veröffentlicht 05.02.2025 18:15:31
  • Zuletzt bearbeitet 12.11.2025 14:36:53

When BIG-IP APM Access Profile is configured on a virtual server, undisclosed request can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

8.9

CVE-2025-21087

  • EPSS 0.42%
  • Veröffentlicht 05.02.2025 18:15:30
  • Zuletzt bearbeitet 21.10.2025 11:40:40

When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed traffic can cause an increase in memory and CPU resource utilization. Note: Software versions which have reached End of T...

8.7

CVE-2025-21091

  • EPSS 0.63%
  • Veröffentlicht 05.02.2025 18:15:30
  • Zuletzt bearbeitet 21.10.2025 11:40:28

When SNMP v1 or v2c are disabled on the BIG-IP, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

8.8

CVE-2025-20029

  • EPSS 66.18%
  • Veröffentlicht 05.02.2025 18:15:29
  • Zuletzt bearbeitet 21.10.2025 11:41:21

Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticated attacker to execute arbitrary system commands. Note: Software versions which have reached End of Technical Suppor...

8.7

CVE-2025-20045

  • EPSS 0.56%
  • Veröffentlicht 05.02.2025 18:15:29
  • Zuletzt bearbeitet 21.10.2025 11:41:11

When SIP session Application Level Gateway mode (ALG) profile with Passthru Mode enabled and SIP router ALG profile are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to ter...

8.9

CVE-2025-20058

  • EPSS 0.55%
  • Veröffentlicht 05.02.2025 18:15:29
  • Zuletzt bearbeitet 21.10.2025 11:40:49

When a BIG-IP message routing profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

8.6

CVE-2024-45844

Exploit
  • EPSS 0.05%
  • Veröffentlicht 16.10.2024 15:15:16
  • Zuletzt bearbeitet 21.10.2025 11:43:40

BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

7.5

CVE-2024-41164

  • EPSS 0.67%
  • Veröffentlicht 14.08.2024 15:15:27
  • Zuletzt bearbeitet 19.08.2024 18:39:06

When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions beyond the attackers control can cause TMM to terminate. Note: Software versions which have reached End of Technical...

4.3

CVE-2024-41723

  • EPSS 0.47%
  • Veröffentlicht 14.08.2024 15:15:27
  • Zuletzt bearbeitet 20.08.2024 19:26:24

Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.