Security Advisory

CVE-2025-61933

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-10-15 15:19:49

Last updated 2026-02-26 16:57:31

Assigner f5

CVSS score 6.1

State PUBLISHED

Description

A reflected cross-site scripting (XSS) vulnerability exists in an undisclosed page of BIG-IP APM that allows an attacker to run JavaScript in the context of the targeted logged-out user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

← Browse all CVEs View on cve.org ↗