Approved changes feed: RSS · Atom

cpe:2.3:a:f5:big-ip_next:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductBig Ip Next (ddfe92af-626a-5f9a-b90d-e1c5d8d61f06)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-54500 vulnerable 2026-06-08 07:33:12.677539 HTTP/2 Vulnerability
MEDIUM (5.3)
An HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit (HTTP/2 MadeYouReset Attack).  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2025-08-13T14:46:55.097Z
Updated: 2025-11-03T20:06:30.935Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41399 vulnerable 2026-06-08 07:25:06.946684 SCTP Vulnerability
HIGH (7.5)
When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2025-05-07T22:04:07.220Z
Updated: 2025-05-08T13:23:51.078Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36504 vulnerable 2026-06-08 07:21:01.789747 BIG-IP HTTP/2 vulnerability
HIGH (7.5)
When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2025-05-07T22:04:09.881Z
Updated: 2025-05-08T13:05:39.886Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21087 vulnerable 2026-06-08 07:08:51.159092 TMM Vulnerability
HIGH (7.5)
When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed traffic can cause an increase in memory and CPU resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2025-02-05T17:30:59.689Z
Updated: 2025-02-05T18:24:18.086Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.