F5 Big Ip Edge Gateway vulnerabilities, page 5

293 vulnerabilities

Known vulnerabilities in F5 Big Ip Edge Gateway, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5HighCVE-2016-6876f5 · big-ip_access_policy_manager +13 moref5 big-ip_access_policy_managerThe RESOLV::lookup iRule command in F5 BIG-IP LTM, APM, ASM, and Link Controller 10.2.1 through 10.2.4, 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.0.0 before HF3; BIG-IP AAM, AFM, and PEM 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.0.0 before HF3; BIG-IP Analytics 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1, and 12.0.0 before HF3; BIG-IP DNS 12.0.0 before HF3; BIG-IP Edge Gateway, WebAccelerator, and WOM 10.2.1 through 10.2.4 and 11.2.1; BIG-IP GTM 10.2.1 through 10.2.4, 11.2.1, 11.4.x, 11.5.x before 11.5.4 HF2, and 11.6.x before 11.6.1; and BIG-IP PSM 10.2.1 through 10.2.4 and 11.4.0 through 11.4.1 allows remote DNS servers to cause a denial of service (CPU consumption or Traffic Management Microkernel crash) via a crafted PTR response.EPSS1.58%5.9MediumCVE-2016-3686f5 · big-ip_access_policy_manager +1 moref5 big-ip_access_policy_managerThe Single Sign-On (SSO) feature in F5 BIG-IP APM 11.x before 11.6.0 HF6 and BIG-IP Edge Gateway 11.0.0 through 11.3.0 might allow remote attackers to obtain sensitive SessionId information by leveraging access to the Location HTTP header in a redirect.EPSS1.53%5.3MediumCVE-2016-3687f5 · big-ip_access_policy_manager +1 moref5 big-ip_access_policy_managerOpen redirect vulnerability in F5 BIG-IP APM 11.2.1, 11.4.x, 11.5.x, and 11.6.x before 11.6.0 HF6 and Edge Gateway 11.2.1, when using multi-domain single sign-on (SSO), allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a base64-encoded URL in the SSO_ORIG_URI parameter.EPSS1.21%8.7HighCVE-2025-21091f5 · big-ip +21 moreBIG-IP SNMP vulnerabilityWhen SNMP v1 or v2c are disabled on the BIG-IP, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluatedEPSS0.45%8.9HighCVE-2025-21087f5 · big-ip +22 moreTMM VulnerabilityWhen Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed traffic can cause an increase in memory and CPU resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluatedEPSS0.41%6.9MediumCVE-2025-54500f5 · big-ip +28 moreHTTP/2 VulnerabilityAn HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit (HTTP/2 MadeYouReset Attack).  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.50%6.9MediumCVE-2025-54755f5 · big-ip +21 moreBIG-IP Configuration utility vulnerabilityA directory traversal vulnerability exists in TMUI that allows a highly privileged authenticated attacker to access files which are not limited to the intended files.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS1.19%8.7HighCVE-2025-52585f5 · big-ip +21 moreBIG-IP Client SSL profile vulnerabilityWhen a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman (ADH) ciphers enabled, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.34%8.7HighCVE-2025-61958f5 · big-ip +21 moreBIG-IP TMSH vulnerabilityA vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role to bypass tmsh restrictions and gain access to a bash shell.  For BIG-IP systems running in Appliance mode, a successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.39%8.7HighCVE-2025-61951f5 · big-ip +21 moreBIG-IP DTLS 1.2 VulnerabilityUndisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  This issue may occur when a Datagram Transport Layer Security (DTLS) 1.2 virtual server is enabled with a Server SSL profile that is configured with a certificate, key, and the SSL Sign Hash set to ANY, and the backend server is enabled with DTLS 1.2 and client authentication.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.24%8.7HighCVE-2025-61990f5 · big-ip +26 moreTMM vulnerabilityWhen using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.35%8.5HighCVE-2025-59483f5 · big-ip +21 moreBIG-IP Configuration utility and tmsh vulnerabilityA validation vulnerability exists in an undisclosed URL in the Configuration utility.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.37%8.7HighCVE-2025-59481f5 · big-ip +21 moreBIG-IP iControl REST and tmsh vulnerabilityA vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with at least resource administrator role to execute arbitrary system commands with higher privileges.  A successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.39%6.9MediumCVE-2025-59268f5 · big-ip +21 moreBIG-IP Configuration utility vulnerabilityOn the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated remote attacker through the Configuration utility.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.40%8.7HighCVE-2025-59781f5 · big-ip +23 moreBIG-IP DNS cache vulnerabilityWhen DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilization.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.35%8.4HighCVE-2025-59269f5 · big-ip +21 moreBIG-IP Configuration utility XSS vulnerabilityA stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.28%8.7HighCVE-2025-41399f5 · big-ip +27 moreSCTP VulnerabilityWhen a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.43%8.7HighCVE-2025-41433f5 · big-ip +21 moreBIG-IP SIP ALG profile vulnerabilityWhen a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.44%8.7HighCVE-2025-41414f5 · big-ip +25 moreBIG-IP HTTP/2 vulnerabilityWhen HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluatedEPSS0.43%8.7HighCVE-2025-48008f5 · big-ip +25 moreBIG-IP MPTCP vulnerabilityWhen a TCP profile with Multipath TCP (MPTCP) enabled is configured on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.44%