CVE-2025-35995 — BIG-IP PEM vulnerability
When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual server, undisclosed r…
Published: 2025-05-07 · CVSS: 8.7 · CVSS 4.0
When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat command is enabled on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7