F5

Big-ip Policy Enforcement Manager

493 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.7

CVE-2025-24497

  • EPSS 0.34%
  • Veröffentlicht 05.02.2025 18:15:35
  • Zuletzt bearbeitet 06.08.2025 16:19:57

When URL categorization is configured on a virtual server, undisclosed requests can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

8

CVE-2025-24320

  • EPSS 0.44%
  • Veröffentlicht 05.02.2025 18:15:34
  • Zuletzt bearbeitet 21.10.2025 18:30:58

A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. This vulnerability is due to an incomplete f...

8.7

CVE-2025-22846

  • EPSS 0.34%
  • Veröffentlicht 05.02.2025 18:15:31
  • Zuletzt bearbeitet 10.09.2025 15:57:39

When SIP Session and Router ALG profiles are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.   Note: Software versions which have reached End of Technical Su...

8.7

CVE-2025-22891

  • EPSS 0.34%
  • Veröffentlicht 05.02.2025 18:15:31
  • Zuletzt bearbeitet 06.08.2025 16:24:44

When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an increase in memory resource utilization. Note: Softw...

9.9

CVE-2025-23239

  • EPSS 0.46%
  • Veröffentlicht 05.02.2025 18:15:31
  • Zuletzt bearbeitet 07.11.2025 16:16:26

When running in Appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have...

8.9

CVE-2025-21087

  • EPSS 0.34%
  • Veröffentlicht 05.02.2025 18:15:30
  • Zuletzt bearbeitet 21.10.2025 11:40:40

When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed traffic can cause an increase in memory and CPU resource utilization. Note: Software versions which have reached End of T...

8.7

CVE-2025-21091

  • EPSS 0.34%
  • Veröffentlicht 05.02.2025 18:15:30
  • Zuletzt bearbeitet 21.10.2025 11:40:28

When SNMP v1 or v2c are disabled on the BIG-IP, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

8.8

CVE-2025-20029

  • EPSS 48.96%
  • Veröffentlicht 05.02.2025 18:15:29
  • Zuletzt bearbeitet 21.10.2025 11:41:21

Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticated attacker to execute arbitrary system commands. Note: Software versions which have reached End of Technical Suppor...

8.7

CVE-2025-20045

  • EPSS 0.4%
  • Veröffentlicht 05.02.2025 18:15:29
  • Zuletzt bearbeitet 21.10.2025 11:41:11

When SIP session Application Level Gateway mode (ALG) profile with Passthru Mode enabled and SIP router ALG profile are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to ter...

8.9

CVE-2025-20058

  • EPSS 0.34%
  • Veröffentlicht 05.02.2025 18:15:29
  • Zuletzt bearbeitet 21.10.2025 11:40:49

When a BIG-IP message routing profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated