F5 Big Ip Websafe vulnerabilities, page 4

175 vulnerabilities

Known vulnerabilities in F5 Big Ip Websafe, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.7HighCVE-2025-53474f5 · big-ip +21 moreBIG-IP iRules vulnerabilityWhen an iRule using an ILX::call command is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.35%8.7HighCVE-2025-53856f5 · big-ip +21 moreTMM vulnerabilityWhen a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object uses the embedded Packet Velocity Acceleration (ePVA) feature, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  To determine which BIG-IP platforms have an ePVA chip refer to K12837: Overview of the ePVA feature https://my.f5.com/manage/s/article/K12837 .  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.35%8.7HighCVE-2025-53868f5 · big-ip +21 moreBIG-IP SCP and SFTP vulnerabilityWhen running in Appliance mode, a highly privileged authenticated attacker with access to SCP and SFTP may be able to bypass Appliance mode restrictions using undisclosed commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.44%6.3MediumCVE-2025-58424f5 · big-ip +21 moreBIG-IP TMM vulnerabilityOn BIG-IP systems, undisclosed traffic can cause data corruption and unauthorized data modification in protocols which do not have message integrity protection.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.25%8.7HighCVE-2025-58071f5 · big-ip +24 moreBIG-IP IPSec vulnerabilityWhen IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.37%8.2HighCVE-2025-58153f5 · big-ip +21 moreBIG-IP HSB vulnerabilityUnder undisclosed traffic conditions along with conditions beyond the attacker's control, hardware systems with a High-Speed Bridge (HSB) may experience a lockup of the HSB.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.23%8.2HighCVE-2025-58096f5 · big-ip +21 moreBIG-IP TMM vulnerabilityWhen the database variable tm.tcpudptxchecksum is configured as non-default value Software-only on a BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.35%8.7HighCVE-2025-46706f5 · big-ip +25 moreBIG-IP iRules vulnerabilityWhen an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.43%8HighCVE-2025-24320f5 · big-ip +21 moreBIG-IP Configuration utility vulnerabilityA stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. This vulnerability is due to an incomplete fix for CVE-2024-31156 https://my.f5.com/manage/s/article/K000138636 .  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.EPSS0.43%3.7LowCVE-2022-41983f5 · big-ip +19 moreBIG-IP TMM Vulnerability CVE-2022-41983On specific hardware platforms, on BIG-IP versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all versions of 13.1.x, while Intel QAT (QuickAssist Technology) and the AES-GCM/CCM cipher is in use, undisclosed conditions can cause BIG-IP to send data unencrypted even with an SSL Profile applied.EPSS0.30%7.5HighCVE-2017-0303f5 networks, inc. · big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafe +8 moref5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafeIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11.5.1 to 11.6.1, under limited circumstances connections handled by a Virtual Server with an associated SOCKS profile may not be properly cleaned up, potentially leading to resource starvation. Connections may be left in the connection table which then can only be removed by restarting TMM. Over time this may lead to the BIG-IP being unable to process further connections.EPSS2.66%9.8CriticalCVE-2017-6131f5 networks, inc. · big-ip azure cloud instance +9 moref5 networks, inc. big-ip azure cloud instanceIn some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may contain a default administrative password which could be used to remotely log into the BIG-IP system. The impacted administrative account is the Azure instance administrative user that was created at deployment. The root and admin accounts are not vulnerable. An attacker may be able to remotely access the BIG-IP host via SSH.EPSS1.14%7.5HighCVE-2017-6155f5 networks, inc. · big-ip (ltm, aam, afm, apm, asm, edge gateway, link controller, pem, psm, webaccelerator, websafe) +11 moref5 networks, inc. big-ip (ltm, aam, afm, apm, asm, edge gateway, link controller, pem, psm, webaccelerator, websafe)On F5 BIG-IP 13.0.0, 12.0.0-12.1.3.1, 11.6.0-11.6.2, 11.4.1-11.5.5, or 11.2.1, malformed SPDY or HTTP/2 requests may result in a disruption of service to TMM. Data plane is only exposed when a SPDY or HTTP/2 profile is attached to a virtual server. There is no control plane exposure.EPSS1.30%5.9MediumCVE-2017-6147f5 networks, inc. · f5 big-ip +10 moref5 networks, inc. f5 big-ipIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2-HF1 and 13.0.0, an undisclosed type of responses may cause TMM to restart, causing an interruption of service when "SSL Forward Proxy" setting is enabled in both the Client and Server SSL profiles assigned to a BIG-IP Virtual Server.EPSS1.33%8.1HighCVE-2017-6157f5 networks, inc. · big-ip (ltm, aam, afm, apm, asm, link controller, pem, websafe) +8 moref5 networks, inc. big-ip (ltm, aam, afm, apm, asm, link controller, pem, websafe)In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.5.0 - 11.5.4, virtual servers with a configuration using the HTTP Explicit Proxy functionality and/or SOCKS profile are vulnerable to an unauthenticated, remote attack that allows modification of BIG-IP system configuration, extraction of sensitive system files, and/or possible remote command execution on the BIG-IP system.EPSS4.01%7.5HighCVE-2017-6138f5 networks, inc. · big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafe +11 moref5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafeIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, malicious requests made to virtual servers with an HTTP profile can cause the TMM to restart. The issue is exposed with BIG-IP APM profiles, regardless of settings. The issue is also exposed with the non-default "normalize URI" configuration options used in iRules and/or BIG-IP LTM policies.EPSS1.58%7.5HighCVE-2017-6148f5 networks, inc. · big-ip (ltm, aam, afm, apm, asm, link controller, pem, websafe) +8 moref5 networks, inc. big-ip (ltm, aam, afm, apm, asm, link controller, pem, websafe)Responses to SOCKS proxy requests made through F5 BIG-IP version 13.0.0, 12.0.0-12.1.3.1, 11.6.1-11.6.2, or 11.5.1-11.5.5 may cause a disruption of services provided by TMM. The data plane is impacted and exposed only when a SOCKS proxy profile is attached to a Virtual Server. The control plane is not impacted by this vulnerability.EPSS1.30%7.8HighCVE-2017-6135f5 networks, inc. · big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafe +11 moref5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafeIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, a slow memory leak as a result of undisclosed IPv4 or IPv6 packets sent to BIG-IP management port or self IP addresses may lead to out of memory (OOM) conditions.EPSS1.64%8.5HighCVE-2017-6167f5 networks, inc. · big-ip ltm, aam, afm, analytics, apm, asm, dns, link controller, pem, websafe +10 moref5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, link controller, pem, websafeIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, race conditions in iControl REST may lead to commands being executed with different privilege levels than expected.EPSS1.06%7.5HighCVE-2017-6132f5 networks, inc. · big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafe +11 moref5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafeIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 and 11.5.0 - 11.5.4, an undisclosed sequence of packets sent to BIG-IP High Availability state mirror listeners (primary and/or secondary IP) may cause TMM to restart.EPSS2.54%