NA - CVE-2025-24312 - When BIG-IP AFM is provisioned with IPS module...
When BIG-IP AFM is provisioned with IPS module enabled and protocol inspection profile is configured on a virtual server or firewall rule or policy, undisclosed traffic can cause an increase in CPU...
NA - CVE-2025-24319 - When BIG-IP Next Central Manager is running,...
When BIG-IP Next Central Manager is running, undisclosed requests to the BIG-IP Next Central Manager API can cause the BIG-IP Next Central Manager Node's Kubernetes service to terminate....
NA - CVE-2025-24320 - A stored cross-site scripting (XSS)...
A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently...
NA - CVE-2025-24326 - When BIG-IP Advanced WAF/ASM Behavioral DoS...
When BIG-IP Advanced WAF/ASM Behavioral DoS (BADoS) TLS Signatures feature is configured, undisclosed traffic can case an increase in memory resource utilization. Note: Software versions which...
NA - CVE-2025-24497 - When URL categorization is configured on a...
When URL categorization is configured on a virtual server, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not...
Medium - CVE-2024-38316 - IBM Aspera Shares 1.9.0 through 1.10.0 PL6 does...
IBM Aspera Shares 1.9.0 through 1.10.0 PL6 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a denial of service.
Medium - CVE-2024-38317 - IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is...
IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the...
Medium - CVE-2024-38318 - IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is...
IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser...
Medium - CVE-2024-56470 - IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is...
IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially...
Medium - CVE-2024-56471 - IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is...
IBM Aspera Shares 1.9.0 through 1.10.0 PL6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially...