CVE-2026-22548
- EPSS 0.19%
- Veröffentlicht 04.02.2026 15:02:05
- Zuletzt bearbeitet 13.02.2026 21:44:47
When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests along with conditions beyond the attacker's control can cause the bd process to terminate. Note: Software versions which have reached End of Te...
CVE-2025-61990
- EPSS 0.32%
- Veröffentlicht 15.10.2025 15:19:52
- Zuletzt bearbeitet 21.10.2025 12:12:24
When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-61933
- EPSS 0.19%
- Veröffentlicht 15.10.2025 15:19:49
- Zuletzt bearbeitet 08.10.2026 11:10:00
A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of BIG-IP APM that allows an attacker to run JavaScript in the context of the targeted logged-out user. Note: Software versions which have reached End of Technical Su...
CVE-2025-58071
- EPSS 0.35%
- Veröffentlicht 15.10.2025 15:19:46
- Zuletzt bearbeitet 21.10.2025 19:17:54
When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-61935
- EPSS 0.33%
- Veröffentlicht 15.10.2025 15:19:46
- Zuletzt bearbeitet 08.10.2026 11:10:00
When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-54755
- EPSS 1.11%
- Veröffentlicht 15.10.2025 13:55:55
- Zuletzt bearbeitet 08.10.2026 12:10:00
A directory traversal vulnerability exists in TMUI that allows a highly privileged authenticated attacker to access files which are not limited to the intended files. Note: Software versions which have reached End of Technical Support (EoTS) are not...
CVE-2025-59483
- EPSS 0.35%
- Veröffentlicht 15.10.2025 13:55:55
- Zuletzt bearbeitet 08.10.2026 12:10:00
A validation vulnerability exists in an undisclosed URL in the Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-61974
- EPSS 0.43%
- Veröffentlicht 15.10.2025 13:55:55
- Zuletzt bearbeitet 21.10.2025 21:09:04
When a client SSL profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-59481
- EPSS 0.37%
- Veröffentlicht 15.10.2025 13:55:54
- Zuletzt bearbeitet 08.10.2026 12:10:00
A vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with at least resource administrator role to execute arbitrary system commands with higher privileges. A successful ...
CVE-2025-61960
- EPSS 0.32%
- Veröffentlicht 15.10.2025 13:55:54
- Zuletzt bearbeitet 08.10.2026 12:10:00
When a per-request policy is configured on a BIG-IP APM portal access virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are...