CVE-2025-24326

High CVSS: 8.9

When BIG-IP Advanced WAF/ASM Behavioral DoS (BADoS) TLS Signatures feature is configured, undisclosed traffic can case an increase in memory resource utilization.

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Vendor

Product

Big-ip Application Security Manager

CWE

CWE-787

Yayın Tarihi

2025-02-05 18:15:35

Güncelleme

2025-08-08 17:05:04

Source Identifier

f5sirt@f5.com

KEV Date Added

Kategoriler

CWE-787 Big-ip Application Security Manager HIGH F5 2025

Referanslar

https://my.f5.com/manage/s/article/K000140950

Benzer Kayıtlar

High

CVE-2026-32647

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker t…

High

CVE-2026-27654

NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_dav_module module that might allow an attacker to…

High

CVE-2026-27784

The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow…

Medium

CVE-2026-28753

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_mail_smtp_module module due to the improper handling of…

Medium

CVE-2026-28755

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling o…

High

CVE-2026-27651

When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause…