CVE-2025-36557
- EPSS 0.07%
- Published 07.05.2025 22:15:20
- Last modified 06.08.2025 18:14:59
When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (...
CVE-2025-41431
- EPSS 0.07%
- Published 07.05.2025 22:15:20
- Last modified 06.08.2025 16:25:30
When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standby BIG-IP systems in a traffic group. Note: Software versions which have reached End of T...
CVE-2025-35995
- EPSS 0.07%
- Published 07.05.2025 22:15:19
- Last modified 29.09.2025 21:30:36
When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. ...
CVE-2025-24497
- EPSS 0.19%
- Published 05.02.2025 18:15:35
- Last modified 06.08.2025 16:19:57
When URL categorization is configured on a virtual server, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2025-22846
- EPSS 0.19%
- Published 05.02.2025 18:15:31
- Last modified 10.09.2025 15:57:39
When SIP Session and Router ALG profiles are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Su...
CVE-2025-22891
- EPSS 0.19%
- Published 05.02.2025 18:15:31
- Last modified 06.08.2025 16:24:44
When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an increase in memory resource utilization. Note: Softw...
CVE-2025-23239
- EPSS 0.43%
- Published 05.02.2025 18:15:31
- Last modified 06.08.2025 16:23:09
When running in Appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have...
CVE-2024-41164
- EPSS 0.67%
- Published 14.08.2024 15:15:27
- Last modified 19.08.2024 18:39:06
When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions beyond the attackers control can cause TMM to terminate. Note: Software versions which have reached End of Technical...
CVE-2024-41723
- EPSS 0.35%
- Published 14.08.2024 15:15:27
- Last modified 20.08.2024 19:26:24
Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2024-41727
- EPSS 0.49%
- Published 14.08.2024 15:15:27
- Last modified 20.08.2024 19:25:12
In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV NIC, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which have reached End of ...