F5 Nginx App Protect WAF vulnerabilities

1 vulnerability

Known vulnerabilities in F5 Nginx App Protect WAF, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.9CVE-2025-58474f5big-ip+3
EPSS score
0.39%
When BIG-IP Advanced WAF is configured on a virtual server with Server-Side Request Forgery (SSRF) protection or when an NGINX server is configured with App Protect Bot Defense, undisclosed requests can disrupt new client requests.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.