AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-47148

MEDIUM · CVSS 6.5 EPSS 0.36%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-10-15 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.5. It affects BIG-IP.

CVE
CVE-2025-47148
Severity
MEDIUM
CVSS
6.5
EPSS
0.36%
BIG-IP

Original NVD Description

When the BIG-IP system is configured as both a Security Assertion Markup Language (SAML) service provider (SP) and Identity Provider (IdP), with single logout (SLO) enabled on an access policy, undisclosed requests can cause an increase in memory resource utilization.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Related CVEs

Other vulnerabilities affecting the same vendor(s)