F5

Big-ip Next Cloud-native Network Functions

6 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.7

CVE-2025-36557

  • EPSS 0.07%
  • Published 07.05.2025 22:15:20
  • Last modified 06.08.2025 18:14:59

When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (...

7.5

CVE-2024-41164

  • EPSS 0.67%
  • Published 14.08.2024 15:15:27
  • Last modified 19.08.2024 18:39:06

When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions beyond the attackers control can cause TMM to terminate. Note: Software versions which have reached End of Technical...

4.4

CVE-2024-28132

  • EPSS 0.05%
  • Published 08.05.2024 15:15:09
  • Last modified 06.08.2025 14:57:45

Exposure of Sensitive Information vulnerability exists in the GSLB container, which may allow an authenticated attacker with local access to view sensitive information.  Note: Software versions which have reached End of Technical Support (EoTS) are ...

7.5

CVE-2024-25560

  • EPSS 0.1%
  • Published 08.05.2024 15:15:08
  • Last modified 21.11.2024 09:00:59

When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

7.1

CVE-2024-23306

  • EPSS 0.16%
  • Published 14.02.2024 17:15:13
  • Last modified 05.09.2025 15:50:11

A vulnerability exists in BIG-IP Next CNF and SPK systems that may allow access to undisclosed sensitive files.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

7.5

CVE-2023-45886

Exploit
  • EPSS 0.31%
  • Published 21.11.2023 06:15:42
  • Last modified 21.11.2024 08:27:33

The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed attribute.