← Database

CVE-2025-35995

HIGH CVSS: 7.5 Published: 2025-05-07 Modified: 2026-06-17

Description

When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected Platforms

F5 Big-Ip Policy Enforcement Manager

Weakness Type

CWE-125

References