CVE-2025-54854 in F5 BIG-IP APM
Summary
When a BIG-IP APM OAuth access profile (Resource Server or Resource Client) is configured on a virtual server, undisclosed traffic can cause the apmd process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Disclosure
10/15/2025
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 328668 | F5 BIG-IP APM OAuth Access Profile denial of service | 404 | Not defined | Official fix | CVE-2025-54854 |