CVE-2025-24497

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

When URL categorization is configured on a virtual server, undisclosed requests can cause TMM to terminate.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
F5BIG-IP>= 17.1.0, < 17.1.2

References

Timeline

Published
Feb 5, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-244997.2A vulnerability has been identified in SCALANCE WAB762-1 (6GK5762-1AJ00-6AA0) (All versions < V3.0.0), SCALANCE WAM763-1 (6GK5763-1AL00-7DA0CVE-2025-24508.8NI Vision Builder AI VBAI File Processing Missing Warning Remote Code Execution Vulnerability. This vulnerability allows remote attackers toCVE-2025-245008.7The vulnerability allows an unauthenticated attacker to access information in PAM database.CVE-2025-245015.3An improper input validation allows an unauthenticated attacker to alter PAM logs by sending a specially crafted HTTP request.CVE-2025-245025.3An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of anCVE-2025-245039.3A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM server.CVE-2025-245045.3An improper input validation the CSRF filter results in unsanitized user input written to the application logs.CVE-2025-245058.8This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by uploadiCVE-2025-245065.3A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types.CVE-2025-245078.9This vulnerability allows appliance compromise at boot time.CVE-2025-245086.4Extraction of Account Connectivity Credentials (ACCs) from the IT Management Agent secure storageCVE-2025-245106.5A vulnerability has been identified in MS/TP Point Pickup Module (All versions). Affected devices improperly handle specific incoming BACnet
CVE-2025-24497: High severity, CVSS 7.5 | Vulnix