PT-2025-42371 · F5 · F5 Big-Ip Apm

Published 2025-10-15 · Updated 2025-10-15 · CVE-2025-61933

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM (affected versions not specified)

Description A reflected cross-site scripting (XSS) issue exists on an unspecified page within BIG-IP APM. This allows an attacker to execute JavaScript code within the security context of a user who is not logged in. The vulnerability enables the execution of arbitrary JavaScript in the context of the targeted logged-out user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-61933

Affected Products

F5 Big-Ip Apm

References · 7

• https://my.f5.com/manage/s/article/K000156596 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61933 · Security Note
• https://osv.dev/vulnerability/CVE-2025-61933 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1978527651489870225 · Twitter Post
• https://twitter.com/CVEnew/status/1978545048561316225 · Twitter Post
• https://t.me/CVEtracker/35013 · Telegram Post
• https://t.me/cveNotify/138800 · Telegram Post