Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-22891

When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Published

2025-02-05T18:15:31.190

Last Modified

2025-08-06T16:24:44.890

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Primary
    CWE-772
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application f5 big-ip_policy_enforcement_manager < 15.1.10.6.0.11.6 Yes
Application f5 big-ip_policy_enforcement_manager < 16.1.5 Yes
Application f5 big-ip_policy_enforcement_manager < 17.1.2 Yes
References