← Database

CVE-2025-36557

HIGH CVSS: 7.5 Published: 2025-05-07 Modified: 2026-06-17

Description

When an HTTP profile with the Enforce RFC Compliance option is configured on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected Platforms

F5 Big-Ip Global Traffic ManagerF5 Big-Ip Local Traffic ManagerF5 Big-Ip Next Service Proxy For KubernetesF5 Big-Ip Advanced Firewall ManagerF5 Big-Ip Access Policy ManagerF5 Big-Ip Application Security ManagerF5 Big-Ip Next Cloud-Native Network FunctionsF5 Big-Ip Application Acceleration ManagerF5 Big-Ip Domain Name SystemF5 Big-Ip Analytics

Weakness Type

CWE-120

References