2025 CVE Vulnerabilities
45,146 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-62371 | HIGH | 7.4 | 0.2% | Oct 15, 2025 | OpenSearch Data Prepper as an open source data collector for observability data. In versions prior to 2.12.2, the OpenSe... |
| CVE-2025-58133 | HIGH | 7.5 | 0.3% | Oct 15, 2025 | Authentication bypass in some Zoom Rooms Clients before version 6.5.1 may allow an unauthenticated user to conduct a dis... |
| CVE-2025-20350 | HIGH | 7.5 | 0.4% | Oct 15, 2025 | A vulnerability in the web UI of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phon... |
| CVE-2025-10577 | HIGH | 8.5 | 0.1% | Oct 15, 2025 | Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research ... |
| CVE-2025-10576 | HIGH | 8.5 | 0.1% | Oct 15, 2025 | Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research ... |
| CVE-2025-62370 | HIGH | 7.5 | 0.4% | Oct 15, 2025 | Alloy Core libraries at the root of the Rust Ethereum ecosystem. Prior to 0.8.26 and 1.4.1, an uncaught panic triggered ... |
| CVE-2025-61990 | HIGH | 8.7 | 0.3% | Oct 15, 2025 | When using a multi-bladed platform with more than one blade, undisclosed traffic can cause the Traffic Management Microk... |
| CVE-2025-61935 | HIGH | 8.7 | 0.3% | Oct 15, 2025 | When a BIG IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the ... |
| CVE-2025-58071 | HIGH | 8.7 | 0.3% | Oct 15, 2025 | When IPsec is configured on the BIG-IP system, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to... |
| CVE-2025-57780 | HIGH | 8.8 | 0.2% | Oct 15, 2025 | A vulnerability exists in F5OS-A and F5OS-C system that may allow an authenticated attacker with local access to escalat... |
| CVE-2025-8486 | HIGH | 8.5 | 0.1% | Oct 15, 2025 | A potential vulnerability was reported in PC Manager that could allow a local authenticated user to execute code with el... |
| CVE-2025-10581 | HIGH | 8.5 | 0.1% | Oct 15, 2025 | A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment t... |
| CVE-2025-61974 | HIGH | 8.7 | 0.4% | Oct 15, 2025 | When a client SSL profile is configured on a virtual server, undisclosed requests can cause an increase in memory resour... |
| CVE-2025-61960 | HIGH | 8.7 | 0.3% | Oct 15, 2025 | When a per-request policy is configured on a BIG-IP APM portal access virtual server, undisclosed traffic can cause the ... |
| CVE-2025-61958 | HIGH | 8.7 | 0.4% | Oct 15, 2025 | A vulnerability exists in the iHealth command that may allow an authenticated attacker with at least a resource administ... |
| CVE-2025-61955 | HIGH | 8.8 | 0.2% | Oct 15, 2025 | A vulnerability exists in F5OS-A and F5OS-C systems that may allow an authenticated attacker with local access to escala... |
| CVE-2025-61951 | HIGH | 8.7 | 0.2% | Oct 15, 2025 | Undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. This issue may occur when a Datagr... |
| CVE-2025-61938 | HIGH | 8.7 | 0.3% | Oct 15, 2025 | When a BIG-IP Advanced WAF or ASM security policy is configured with a URL greater than 1024 characters in length for th... |
| CVE-2025-60016 | HIGH | 8.7 | 0.4% | Oct 15, 2025 | When Diffie-Hellman (DH) group Elliptic Curve Cryptography (ECC) Brainpool curves are configured in an SSL profile's Cip... |
| CVE-2025-59781 | HIGH | 8.7 | 0.3% | Oct 15, 2025 | When DNS cache is configured on a BIG-IP or BIG-IP Next CNF virtual server, undisclosed DNS queries can cause an increas... |
| CVE-2025-59778 | HIGH | 7.7 | 0.3% | Oct 15, 2025 | When the Allowed IP Addresses feature is configured on the F5OS-C partition control plane, undisclosed traffic can cause... |
| CVE-2025-59481 | HIGH | 8.7 | 0.4% | Oct 15, 2025 | A vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command that may allow an authentica... |
| CVE-2025-59478 | HIGH | 8.7 | 0.3% | Oct 15, 2025 | When a BIG-IP AFM denial-of-service (DoS) protection profile is configured on a virtual server, undisclosed requests can... |
| CVE-2025-59269 | HIGH | 8.4 | 0.3% | Oct 15, 2025 | A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that... |
| CVE-2025-58120 | HIGH | 8.7 | 0.3% | Oct 15, 2025 | When HTTP/2 Ingress is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now