CVE Alert: CVE-2025-61990 – F5 – BIG-IP
CVE-2025-61990 HIGHNo exploitation known When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic...
CVE-2025-61990 HIGHNo exploitation known When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic...
CVE-2025-58071 HIGHNo exploitation known When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel...
CVE-2025-61935 HIGHNo exploitation known When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server,...
CVE-2025-60016 HIGHNo exploitation known When Diffie-Hellman (DH) group Elliptic Curve Cryptography (ECC) Brainpool curves are configured in an SSL profile's...
CVE-2025-59481 HIGHNo exploitation known A vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may...
CVE-2025-59781 HIGHNo exploitation known When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS...
CVE-2025-61938 HIGHNo exploitation known When a BIG-IP Advanced WAF or ASM security policy is configured with a URL greater than...
CVE-2025-55669 HIGHNo exploitation known When the BIG-IP Advanced WAF and ASM security policy and a server-side HTTP/2 profile are configured...
CVE-2025-59478 HIGHNo exploitation known When a BIG-IP AFM denial-of-service (DoS) protection profile is configured on a virtual server, undisclosed requests...
CVE-2025-58096 HIGHNo exploitation known When the database variable tm.tcpudptxchecksum is configured as non-default value Software-only on a BIG-IP system, undisclosed traffic can...
CVE-2025-55036 HIGHNo exploitation known When BIG-IP SSL Orchestrator explicit forward proxy is configured on a virtual server and the proxy...
CVE-2025-54479 HIGHNo exploitation known When a classification profile is configured on a virtual server without an HTTP or HTTP/2 profile,...
CVE-2025-53868 HIGHNo exploitation known When running in Appliance mode, a highly privileged authenticated attacker with access to SCP and SFTP...
CVE-2025-54858 HIGHNo exploitation known When a BIG-IP Advanced WAF or BIG-IP ASM Security Policy is configured with a JSON content...
CVE-2025-54854 HIGHNo exploitation known When a BIG-IP APM OAuth access profile (Resource Server or Resource Client) is configured on a...
CVE-2025-53521 HIGHNo exploitation known When a BIG-IP APM Access Policy is configured on a virtual server, undisclosed traffic can cause...
CVE-2025-53856 HIGHNo exploitation known When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object...
CVE-2025-48008 HIGHNo exploitation known When a TCP profile with Multipath TCP (MPTCP) enabled is configured on a virtual server, undisclosed...
CVE-2025-53474 HIGHNo exploitation known When an iRule using an ILX::call command is configured on a virtual server, undisclosed traffic can cause...
CVE-2025-46706 HIGHNo exploitation known When an iRule containing the HTTP::respond command is configured on a virtual server, undisclosed requests can...
CVE-2025-41430 HIGHNo exploitation known When BIG-IP SSL Orchestrator is enabled, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to...
Vuln Impact This vulnerability allows for unauthenticated attackers with network access to the iControl REST interface, through the BIG-IP management...