F5

Big-ip Next Cloud-native Network Functions

26 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.7

CVE-2025-24312

  • EPSS 0.39%
  • Veröffentlicht 05.02.2025 18:15:34
  • Zuletzt bearbeitet 12.11.2025 16:38:01

When BIG-IP AFM is provisioned with IPS module enabled and protocol inspection profile is configured on a virtual server or firewall rule or policy, undisclosed traffic can cause an increase in CPU resource utilization.   Note: Software versions whi...

7.5

CVE-2024-41164

  • EPSS 0.44%
  • Veröffentlicht 14.08.2024 15:15:27
  • Zuletzt bearbeitet 19.08.2024 18:39:06

When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions beyond the attackers control can cause TMM to terminate. Note: Software versions which have reached End of Technical...

4.4

CVE-2024-28132

  • EPSS 0.17%
  • Veröffentlicht 08.05.2024 15:15:09
  • Zuletzt bearbeitet 06.08.2025 14:57:45

Exposure of Sensitive Information vulnerability exists in the GSLB container, which may allow an authenticated attacker with local access to view sensitive information.  Note: Software versions which have reached End of Technical Support (EoTS) are ...

7.5

CVE-2024-25560

  • EPSS 0.52%
  • Veröffentlicht 08.05.2024 15:15:08
  • Zuletzt bearbeitet 21.10.2025 11:40:17

When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

7.1

CVE-2024-23306

  • EPSS 0.15%
  • Veröffentlicht 14.02.2024 17:15:13
  • Zuletzt bearbeitet 05.09.2025 15:50:11

A vulnerability exists in BIG-IP Next CNF and SPK systems that may allow access to undisclosed sensitive files.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

7.5

CVE-2023-45886

Exploit
  • EPSS 1.43%
  • Veröffentlicht 21.11.2023 06:15:42
  • Zuletzt bearbeitet 21.11.2024 08:27:33

The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed attribute.