F5 BIG-IP Advanced Web Application Firewall (WAF) 17.5.0
Approved changes feed: RSS · Atom
cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:17.5.0:*:*:*:*:*:*:*
part: a version: 17.5.0 update: *
| Vendor | F5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5) |
|---|---|
| Product | Big Ip Advanced Web Application Firewall (f3dd36bd-12f4-50d0-a9c3-130a39781129) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-61951 |
vulnerable | 2026-06-08 07:37:28.427481 |
BIG-IP DTLS 1.2 Vulnerability
HIGH (7.5)
Undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. This issue may occur when a Datagram Transport Layer Security (DTLS) 1.2 virtual server is enabled with a Server SSL profile that is configured with a certificate, key, and the SSL Sign Hash set to ANY, and the backend server is enabled with DTLS 1.2 and client authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2025-10-15T13:55:50.364Z
Updated: 2026-02-26T16:57:40.404Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61938 |
vulnerable | 2026-06-08 07:37:28.381692 |
BIG-IP Advanced WAF and ASM bd process vulnerability
HIGH (7.5)
When a BIG-IP Advanced WAF or ASM security policy is configured with a URL greater than 1024 characters in length for the Data Guard Protection Enforcement setting, either manually or through the automatic Policy Builder, the bd process can terminate repeatedly. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2025-10-15T13:55:47.664Z
Updated: 2026-02-26T16:57:43.798Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-61935 |
vulnerable | 2026-06-08 07:37:28.377281 |
BIG-IP Advanced WAF and ASM vulnerability
HIGH (7.5)
When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2025-10-15T15:19:46.027Z
Updated: 2026-02-26T16:57:32.199Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58153 |
vulnerable | 2026-06-08 07:35:17.347981 |
BIG-IP HSB vulnerability
MEDIUM (5.9)
Under undisclosed traffic conditions along with conditions beyond the attacker's control, hardware systems with a High-Speed Bridge (HSB) may experience a lockup of the HSB.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2025-10-15T13:55:44.577Z
Updated: 2026-02-26T16:57:48.314Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-58071 |
vulnerable | 2026-06-08 07:35:17.079092 |
BIG-IP IPSec vulnerability
HIGH (7.5)
When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2025-10-15T15:19:46.470Z
Updated: 2026-02-26T16:57:31.722Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-20001 |
vulnerable | 2026-06-08 04:47:18.820435 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.