CVEs published in February 2025
40 tracked CVEs from 10 vendors had their first vendor advisory published in February 2025: 2 critical, 22 high, 1 in CISA KEV. Newest first.
24 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2025-26466Medium
Pre-authentication Denial of Service attack in OpenSSH - CVE-2025-26466
Fortinet, NetApp, Red Hat · 3 advisories - Added
CVE-2025-23083High
Node.js Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-40896Critical
libxml2 Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-0306High
Ruby Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-45341Critical
Golang Vulnerability in NetApp Products
NetApp · 1 advisory - Added
runc Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2025-0624High
Grub2: net: out-of-bounds write in grub_net_search_config_file
NetApp, Red Hat · 2 advisories - Added
CVE-2025-26465Medium
machine-in-the-middle attack if verifyhostkeydns is enabled
NetApp, Red Hat · 2 advisories - Added
CVE-2025-0178Medium
WatchGaurd Firebox Host Header Injection Vulnerability
WatchGuard · 1 advisory - Added
CVE-2025-1239Medium
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Blocked Sites List
WatchGuard · 1 advisory - Added
CVE-2025-1071Medium
WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module
WatchGuard · 2 advisories - Added
CVE-2025-23015High
Apache Cassandra Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-54772Medium
MikroTik RouterOS: Issue Summary A vulnerability has been identified in the WinBox service, where a discrepancy in response size between connection…
MikroTik · 1 advisory - Added
CVE-2019-15002Medium
Jira: exploitable CSRF vulnerability exists in Atlassian Jira, from versions 7.6.4 to 8.1.0.
Atlassian · 1 advisory - Added
CVE-2025-0411HighCISA KEV
7-Zip Mark of the Web Bypass Vulnerability
NetApp · 1 advisory - Added
CVE-2024-11187High
ISC BIND Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2024-24911Medium
In rare scenarios, the cpca process on the Security Management Server / Domain Management Server
Check Point · 1 advisory - Added
CVE-2025-24497High
When URL categorization is configured on a virtual server, undisclosed requests can cause TMM to terminate.
F5 · 1 advisory - Added
CVE-2025-24326High
When BIG-IP Advanced WAF/ASM Behavioral DoS (BADoS) TLS Signatures feature is configured, undisclosed traffic
F5 · 1 advisory - Added
CVE-2025-24320High
F5 · 1 advisory - Added
CVE-2025-24319Medium
When BIG-IP Next Central Manager is running, undisclosed requests to the BIG-IP Next Central Manager API
F5 · 1 advisory - Added
CVE-2025-24312High
When BIG-IP AFM is provisioned with IPS module enabled and protocol inspection profile is configured on a virtual server or…
F5 · 1 advisory - Added
CVE-2025-23419Medium
NGINX: When multiple server blocks are configured to share the same IP address and port, an attacker
F5 · 1 advisory - Added
insufficient verification of data authenticity vulnerability exists in BIG-IP APM Access Policy endpoint inspection that may
F5 · 1 advisory - Added
CVE-2025-23413Medium
When users log in through the webUI or API using local authentication, BIG-IP Next Central Manager
F5 · 1 advisory - Added
CVE-2025-23412High
BIG-IP: When BIG-IP APM Access Profile is configured on a virtual server, undisclosed request can cause TMM to terminate.
F5 · 1 advisory - Added
CVE-2025-23239High
When running in Appliance mode, and logged into a highly-privileged role, an authenticated remote command injection…
F5 · 1 advisory - Added
CVE-2025-22891High
When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic
F5 · 1 advisory - Added
CVE-2025-22846High
When SIP Session and Router ALG profiles are configured on a Message Routing type virtual server, undisclosed traffic
F5 · 1 advisory - Added
CVE-2025-21091High
When SNMP v1 or v2c are disabled on the BIG-IP, undisclosed requests can cause an increase in memory resource utilization
F5 · 1 advisory - Added
CVE-2025-21087High
When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed…
F5 · 1 advisory - Added
CVE-2025-20058High
When a BIG-IP message routing profile is configured on a virtual server, undisclosed traffic
F5 · 1 advisory - Added
CVE-2025-20045High
When SIP session Application Level Gateway mode (ALG) profile with Passthru Mode enabled and SIP router ALG profile are…
F5 · 1 advisory - Added
CVE-2025-20029High
Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may
F5 · 1 advisory - Added
CVE-2024-11468High
Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability
Omnissa · 1 advisory - Added
CVE-2024-11467High
Horizon Client: Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a logic flaw.
Omnissa · 1 advisory - Added
CVE-2025-25039Medium
vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager (CPPM)
Aruba · 1 advisory - Added
CVE-2025-23060Medium
vulnerability in HPE Aruba Networking ClearPass Policy Manager
Aruba · 1 advisory - Added
CVE-2025-23059Medium
vulnerability in the web-based management interface of HPE Aruba Networking ClearPass Policy Manager exposes directories…
Aruba · 1 advisory - Added
CVE-2025-23058High
vulnerability in the ClearPass Policy Manager web-based management interface
Aruba · 1 advisory