F5 Big Ip Next vulnerabilities

6 vulnerabilities

Known vulnerabilities in F5 Big Ip Next, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.9CVE-2025-21087f5big-ip+22
EPSS score
0.41%
When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed traffic can cause an increase in memory and CPU resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated6.9CVE-2025-54500f5big-ip+28
EPSS score
0.50%
An HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit (HTTP/2 MadeYouReset Attack).  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.8.7CVE-2025-41399f5big-ip+27
EPSS score
0.43%
When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.8.7CVE-2025-36504f5big-ip+27
EPSS score
0.44%
When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.7.5CVE-2023-44487akkahttp_server+704KEV
EPSS score
100.00%
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.7.5CVE-2023-45886f5big-ip_global_traffic_manager+5
EPSS score
1.43%
The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing a malformed attribute.