Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check resulting it out by two out of bound read.Check if you run itEPSS 0.25%Oct 15, 2025
- Medium6.9An out-of-bounds write vulnerability exists in F5OS-A and F5OS-C that could lead to memory corruption.Check if you run itEPSS 0.21%Oct 15, 2025
- High8.7When a client SSL profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization.Check if you run itEPSS 0.46%Oct 15, 2025
- High8.5A validation vulnerability exists in an undisclosed URL in the Configuration utility.Check if you run itEPSS 0.37%Oct 15, 2025
- Medium6.9A directory traversal vulnerability exists in TMUI that allows a highly privileged authenticated attacker to access files which are not limited to the intended files.Check if you run itEPSS 1.19%Oct 15, 2025
- High8.7When a per-request policy is configured on a BIG-IP APM portal access virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.Check if you run itEPSS 0.35%Oct 15, 2025
- High8.5A vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker with at least resource administrator role to exCheck if you run itEPSS 0.39%Oct 15, 2025
- High8.5A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administrator role to bypass tmsh restrictions and gain access to aCheck if you run itEPSS 0.39%Oct 15, 2025
- High8.5A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to escalate their privileges.Check if you run itEPSS 0.25%Oct 15, 2025
- High8.7When a BIG-IP APM OAuth access profile (Resource Server or Resource Client) is configured on a virtual server, undisclosed traffic can cause the apmd process to terminate.Check if you run itEPSS 0.35%Oct 15, 2025
- High8.2When the database variable tm.tcpudptxchecksum is configured as non-default value Software-only on a BIG-IP system, undisclosed traffic can cause the Traffic Management MicrokernelCheck if you run itEPSS 0.35%Oct 15, 2025
- High8.7When HTTP/2 Ingress is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.Check if you run itEPSS 0.35%Oct 15, 2025
- High8.7When a BIG-IP Advanced WAF or BIG-IP ASM Security Policy is configured with a JSON content profile that has a malformed JSON schema, and the security policy is applied to a virtualCheck if you run itEPSS 0.35%Oct 15, 2025
- High8.5When running in Appliance mode, a highly privileged authenticated attacker with access to SCP and SFTP may be able to bypass Appliance mode restrictions using undisclosed commands.Check if you run itEPSS 0.44%Oct 15, 2025
- High8.7Undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.Check if you run itEPSS 0.24%Oct 15, 2025
- Medium4.6When a highly-privileged, authenticated attacker attempts to initialize the rSeries FIPS module using a password with special shell metacharacters, arbitrary system commands may beCheck if you run itEPSS 0.18%Oct 15, 2025
- High7.7When the Allowed IP Addresses feature is configured on the F5OS-C partition control plane, undisclosed traffic can cause multiple containers to terminate.Check if you run itEPSS 0.34%Oct 15, 2025
- High8.7When a classification profile is configured on a virtual server without an HTTP or HTTP/2 profile, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminCheck if you run itEPSS 0.35%Oct 15, 2025
- High8.7When a virtual server, network address translation (NAT) object, or secure network address translation (SNAT) object uses the embedded Packet Velocity Acceleration (ePVA) feature,Check if you run itEPSS 0.35%Oct 15, 2025
- High7.1On BIG-IP Next CNF, BIG-IP Next SPK, and BIG-IP Next for Kubernetes systems, repeated undisclosed API calls can cause the Traffic Management Microkernel (TMM) to terminate.Check if you run itEPSS 0.31%Oct 15, 2025
- Medium6.0When an iRule is configured on a virtual server via the declarative API, upon re-instantiation, the cleanup process can cause an increase in the Traffic Management Microkernel (TMMCheck if you run itEPSS 0.31%Oct 15, 2025
- High8.7When BIG-IP SSL Orchestrator is enabled, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.Check if you run itEPSS 0.35%Oct 15, 2025
- High8.7When a BIG-IP Advanced WAF or ASM security policy is configured with a URL greater than 1024 characters in length for the Data Guard Protection Enforcement setting, either manuallyCheck if you run itEPSS 0.35%Oct 15, 2025
- Medium6.3On BIG-IP systems, undisclosed traffic can cause data corruption and unauthorized data modification in protocols which do not have message integrity protection.Check if you run itEPSS 0.25%Oct 15, 2025
- High8.7When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increase in memory resource utilization.Check if you run itEPSS 0.35%Oct 15, 2025
Sort