CVE-2025-53521 in BIG-IP APM

Sumário (Inglês)

When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE).  

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

04/10/2025

Divulgação

15/10/2025

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
328677	F5 BIG-IP APM Traffic Management Microkernel Negação de Serviço	770	Atacado	Correção oficial	CVE-2025-53521

Fontes

• MITRE
• NVD
• CVE Details