Cross-Site Scripting Vulnerability in BIG-IP APM by F5 Networks

CVE-2025-61933

What is CVE-2025-61933?

A reflected cross-site scripting (XSS) vulnerability has been identified in an unspecified page within the BIG-IP APM framework, which may allow attackers to execute arbitrary JavaScript in the browser of a targeted logged-out user. This can lead to unauthorized actions being performed under the user's session, especially if the user accesses malicious links. It is crucial for organizations utilizing BIG-IP APM to remain vigilant and apply relevant patches to mitigate this security risk.

References