CVE-2025-23412

概要

参考情報

• my.f5.com/manage/s/article/K000141003 · Vendor Advisory

big-ip access policy manager のその他の脆弱性

• CVE-2026-94127緊急 9.8悪用確認済み（CISA KEV）When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code …
• CVE-2026-63020低 3.1A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages  Impact: …
• CVE-2026-42937中 6.5Incorrect permission assignment vulnerabilities exist in BIG-IP and BIG-IQ TMOS Shell (tmsh) arp and ndp commands, and in BIG-IP iControl RE…
• CVE-2026-42930高 8.7When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Appliance mode restriction…
• CVE-2026-42924高 8.7An authenticated attacker with the Resource Administrator or Administrator role can create SNMP configuration objects through iControl SOAP …