NA - CVE-2025-21087 - When Client or Server SSL profiles are...
When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed traffic can cause an increase in memory and CPU resource utilization....
NA - CVE-2025-21091 - When SNMP v1 or v2c are disabled on the BIG-IP,...
When SNMP v1 or v2c are disabled on the BIG-IP, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support...
NA - CVE-2025-22846 - When SIP Session and Router ALG profiles are...
When SIP Session and Router ALG profiles are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note:...
NA - CVE-2025-22891 - When BIG-IP PEM Control Plane listener Virtual...
When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an...
NA - CVE-2025-23239 - When running in Appliance mode, an...
When running in Appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a...
NA - CVE-2025-23412 - When BIG-IP APM Access Profile is configured on...
When BIG-IP APM Access Profile is configured on a virtual server, undisclosed request can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS)...
NA - CVE-2025-23413 - When users log in through the webUI or API...
When users log in through the webUI or API using local authentication, BIG-IP Next Central Manager may log sensitive information in the pgaudit log files. Note: Software versions which have...
NA - CVE-2025-23415 - An insufficient verification of data...
An insufficient verification of data authenticity vulnerability exists in BIG-IP APM Access Policy endpoint inspection that may allow an attacker to bypass endpoint inspection checks for VPN...
NA - CVE-2025-23419 - When multiple server blocks are configured to...
When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers....
NA - CVE-2025-24312 - When BIG-IP AFM is provisioned with IPS module...
When BIG-IP AFM is provisioned with IPS module enabled and protocol inspection profile is configured on a virtual server or firewall rule or policy, undisclosed traffic can cause an increase in CPU...