F5

Big-ip Application Security Manager

492 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.7

CVE-2025-36557

  • EPSS 0.07%
  • Published 07.05.2025 22:15:20
  • Last modified 06.08.2025 18:14:59

When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (...

8.7

CVE-2025-41431

  • EPSS 0.07%
  • Published 07.05.2025 22:15:20
  • Last modified 06.08.2025 16:25:30

When connection mirroring is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate in the standby BIG-IP systems in a traffic group. Note: Software versions which have reached End of T...

8.9

CVE-2025-24326

  • EPSS 0.19%
  • Published 05.02.2025 18:15:35
  • Last modified 08.08.2025 17:05:04

When BIG-IP Advanced WAF/ASM Behavioral DoS (BADoS) TLS Signatures feature is configured, undisclosed traffic can case an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not...

8.7

CVE-2025-22846

  • EPSS 0.19%
  • Published 05.02.2025 18:15:31
  • Last modified 10.09.2025 15:57:39

When SIP Session and Router ALG profiles are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.   Note: Software versions which have reached End of Technical Su...

9.1

CVE-2025-23239

  • EPSS 0.43%
  • Published 05.02.2025 18:15:31
  • Last modified 06.08.2025 16:23:09

When running in Appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have...

7.5

CVE-2024-41164

  • EPSS 0.67%
  • Published 14.08.2024 15:15:27
  • Last modified 19.08.2024 18:39:06

When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions beyond the attackers control can cause TMM to terminate. Note: Software versions which have reached End of Technical...

4.3

CVE-2024-41723

  • EPSS 0.35%
  • Published 14.08.2024 15:15:27
  • Last modified 20.08.2024 19:26:24

Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

7.5

CVE-2024-41727

  • EPSS 0.49%
  • Published 14.08.2024 15:15:27
  • Last modified 20.08.2024 19:25:12

In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV NIC, undisclosed traffic can cause an increase in memory resource utilization.   Note: Software versions which have reached End of ...

7.5

CVE-2024-39778

  • EPSS 0.46%
  • Published 14.08.2024 15:15:26
  • Last modified 19.08.2024 16:20:52

When a stateless virtual server is configured on BIG-IP system with a High-Speed Bridge (HSB), undisclosed requests can cause TMM to terminate.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

7.5

CVE-2024-23805

  • EPSS 0.31%
  • Published 14.02.2024 17:15:14
  • Last modified 23.01.2025 19:52:22

Undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. For the Application Visibility and Reporting module, this may occur when the HTTP Analytics profile with URLs enabled under Collected Entities is configured on a v...