BIG-IP Advanced WAF vulnerabilities

When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

When a BIG-IP Advanced WAF or ASM security policy is configured with a URL greater than 1024 characters for Data Guard Protection Enforcement, either manually or via Policy Builder, the bd process can terminate repeatedly. Note: EoTS versions not evaluated.

When BIG-IP Advanced WAF is configured with SSRF protection or NGINX with App Protect Bot Defense, undisclosed requests can disrupt new client requests. Software versions that have reached End of Technical Support (EoTS) are not evaluated.