CVE-2025-47148 — BIG-IP APM and SSL Orchestrator vulnerability

CVE-2025-47148

BIG-IP APM and SSL Orchestrator vulnerability PUBLISHED

Description (CNA)

When the BIG-IP system is configured as both a Security Assertion Markup Language (SAML) service provider (SP) and Identity Provider (IdP), with single logout (SLO) enabled on an access policy, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected (CNA)

Vendor / product	Versions
F5 / BIG-IP	affected 17.5.0 before 17.5.1; affected 17.1.0 before 17.1.3; affected 16.1.0 before 16.1.6.1; affected 15.1.0 before 15.1.10.8

CWE

CWE-404

References

https://my.f5.com/manage/s/article/K000148816

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.