CVE Feed

    Dashboard / CVE / CVE-2024-23805

    CVE-2024-23805

    Undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. For the Application Visibility and Reporting module, this may occur when the HTTP Analytics profile with URLs enabled under Collected Entities is configured on a virtual server and the DB variables avr.IncludeServerInURI or avr.CollectOnlyHostnameFromURI are enabled. For BIG-IP Advanced WAF and ASM, this may occur when either a DoS or Bot Defense profile is configured on a virtual server and the DB variables avr.IncludeServerInURI or avr.CollectOnlyHostnameFromURI are enabled. Note: The DB variables avr.IncludeServerInURI and avr.CollectOnlyHostnameFromURI are not enabled by default. For more information about the HTTP Analytics profile and the Collect URLs setting, refer to K30875743: Create a new Analytics profile and attach it to your virtual servers https://my.f5.com/manage/s/article/K30875743 . Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

    Published:Feb 14, 2024
    Last Modified:May 12, 2025
    EPS:Feb 14, 2024
    EPSS Score:0.00308
    CVSS Score:7.5

    Affected Products

    Vendor
    F5
    Product
    Big-ip Advanced Web Application Firewall
    Vendor
    F5
    Product
    Big-ip Application Security Manager

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-100 Overflow Buffers
    CAPEC-47 Buffer Overflow via Parameter Expansion

    Related CVEs

    CVE-2026-39458 (CVSS 8.7) — When a BIG-IP is configured with DNS caching (Such as a DNS profile with caching enabled, SSL Orchestrator, A…
    CVE-2026-22548 (CVSS 8.2) — When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests alon…
    CVE-2026-20732 (CVSS 2.3) — A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof…
    CVE-2025-61990 (CVSS 8.7) — When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Managem…
    CVE-2025-58071 (CVSS 8.7) — When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkerne…
    CVE-2025-61935 (CVSS 8.7) — When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can …
    CVE-2025-54755 (CVSS 6.9) — A directory traversal vulnerability exists in TMUI that allows a highly privileged authenticated attacker to a…
    CVE-2025-59483 (CVSS 8.5) — A validation vulnerability exists in an undisclosed URL in the Configuration utility.  Note: Software versions…
    CVE-2025-59481 (CVSS 8.5) — A vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an …
    CVE-2025-61958 (CVSS 8.5) — A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resourc…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High