F5 Big Ip Websafe vulnerabilities, page 3

175 vulnerabilities

Known vulnerabilities in F5 Big Ip Websafe, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.9MediumCVE-2025-54500f5 · big-ip +28 moreHTTP/2 VulnerabilityAn HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit (HTTP/2 MadeYouReset Attack).  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.50%6.9MediumCVE-2025-54755f5 · big-ip +21 moreBIG-IP Configuration utility vulnerabilityA directory traversal vulnerability exists in TMUI that allows a highly privileged authenticated attacker to access files which are not limited to the intended files.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS1.19%8.7HighCVE-2025-52585f5 · big-ip +21 moreBIG-IP Client SSL profile vulnerabilityWhen a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman (ADH) ciphers enabled, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.34%8.7HighCVE-2025-61958f5 · big-ip +21 moreBIG-IP TMSH vulnerabilityA vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role to bypass tmsh restrictions and gain access to a bash shell.  For BIG-IP systems running in Appliance mode, a successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.39%8.7HighCVE-2025-61951f5 · big-ip +21 moreBIG-IP DTLS 1.2 VulnerabilityUndisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  This issue may occur when a Datagram Transport Layer Security (DTLS) 1.2 virtual server is enabled with a Server SSL profile that is configured with a certificate, key, and the SSL Sign Hash set to ANY, and the backend server is enabled with DTLS 1.2 and client authentication.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.24%8.7HighCVE-2025-61990f5 · big-ip +26 moreTMM vulnerabilityWhen using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.35%8.5HighCVE-2025-59483f5 · big-ip +21 moreBIG-IP Configuration utility and tmsh vulnerabilityA validation vulnerability exists in an undisclosed URL in the Configuration utility.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.37%8.7HighCVE-2025-59481f5 · big-ip +21 moreBIG-IP iControl REST and tmsh vulnerabilityA vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with at least resource administrator role to execute arbitrary system commands with higher privileges.  A successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.39%6.9MediumCVE-2025-59268f5 · big-ip +21 moreBIG-IP Configuration utility vulnerabilityOn the BIG-IP system, undisclosed endpoints that contain static non-sensitive information are accessible to an unauthenticated remote attacker through the Configuration utility.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.40%8.7HighCVE-2025-59781f5 · big-ip +23 moreBIG-IP DNS cache vulnerabilityWhen DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilization.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.35%8.4HighCVE-2025-59269f5 · big-ip +21 moreBIG-IP Configuration utility XSS vulnerabilityA stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.28%8.7HighCVE-2025-41399f5 · big-ip +27 moreSCTP VulnerabilityWhen a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.43%8.7HighCVE-2025-41433f5 · big-ip +21 moreBIG-IP SIP ALG profile vulnerabilityWhen a Session Initiation Protocol (SIP) message routing framework (MRF) application layer gateway (ALG) profile is configured on a Message Routing virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.44%8.7HighCVE-2025-41414f5 · big-ip +25 moreBIG-IP HTTP/2 vulnerabilityWhen HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluatedEPSS0.43%8.7HighCVE-2025-48008f5 · big-ip +25 moreBIG-IP MPTCP vulnerabilityWhen a TCP profile with Multipath TCP (MPTCP) enabled is configured on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.44%8.7HighCVE-2025-20045f5 · big-ip +21 moreBIG-IP SIP MRF VulnerabilityWhen SIP session Application Level Gateway mode (ALG) profile with Passthru Mode enabled and SIP router ALG profile are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.41%8.9HighCVE-2025-20058f5 · big-ip +21 moreBIG-IP message routing vulnerabilityWhen a BIG-IP message routing profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluatedEPSS0.41%8.8HighCVE-2025-20029f5 · big-ip +21 moreBIG-IP iControl REST and tmsh vulnerabilityCommand injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticated attacker to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS7.15%8.7HighCVE-2025-31644f5 · big-ip +21 moreAppliance mode BIG-IP iControl REST and tmsh vulnerabilityWhen running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacker with administrator role privileges to execute arbitrary system commands. A successful exploit can allow the attacker to cross a security boundary.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS24.30%8.7HighCVE-2025-36504f5 · big-ip +27 moreBIG-IP HTTP/2 vulnerabilityWhen a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.44%