CVE-2025-54500
- EPSS 0.1%
- Published 13.08.2025 14:46:55
- Last modified 13.08.2025 17:33:46
An HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit (HTTP/2 MadeYouReset Attack). Note: Software versions which have reached End of Technical Su...
CVE-2025-48500
- EPSS 0.01%
- Published 13.08.2025 14:46:54
- Last modified 13.08.2025 17:33:46
A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. Note: Software version...
CVE-2025-46405
- EPSS 0.1%
- Published 13.08.2025 14:46:54
- Last modified 13.08.2025 17:33:46
When Network Access is configured on a BIG-IP APM virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-52585
- EPSS 0.12%
- Published 13.08.2025 14:46:53
- Last modified 13.08.2025 17:33:46
When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman (ADH) ciphers enabled, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note:...
CVE-2025-41433
- EPSS 0.08%
- Published 07.05.2025 22:15:20
- Last modified 08.05.2025 14:39:09
When a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. ...
CVE-2025-41431
- EPSS 0.07%
- Published 07.05.2025 22:15:20
- Last modified 06.08.2025 16:25:30
When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standby BIG-IP systems in a traffic group. Note: Software versions which have reached End of T...
CVE-2025-41414
- EPSS 0.08%
- Published 07.05.2025 22:15:20
- Last modified 08.05.2025 14:39:09
When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
CVE-2025-41399
- EPSS 0.07%
- Published 07.05.2025 22:15:20
- Last modified 08.05.2025 14:39:09
When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are no...
CVE-2025-36557
- EPSS 0.07%
- Published 07.05.2025 22:15:20
- Last modified 06.08.2025 18:14:59
When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (...
CVE-2025-36525
- EPSS 0.07%
- Published 07.05.2025 22:15:19
- Last modified 29.09.2025 21:30:43
When a BIG-IP APM virtual server is configured to use a PingAccess profile, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.