CVE-2014-8730: The SSL profiles component in F5 BIG-IP LTM, APM, and ASM 10.0.0 through 10.2.4 and 11.0.0 through 11.5.1,...

Security readout for executives and security teams

This is an F5-specific POODLE variant affecting SSL/TLS termination. If vulnerable BIG-IP or BIG-IQ systems allow TLS versions before 1.2 with affected CBC handling, a man-in-the-middle attacker may recover protected cleartext data. No source in the bundle shows current active exploitation. Highest exposure is internet-facing or partner-facing F5 devices terminating legacy TLS before 1.2 on affected versions. Internal load balancers may also matter where attackers could intercept traffic. Environments already enforcing TLS 1.2 or later are less likely exposed based on the CVE condition. Prioritize this for legacy F5 estates that still terminate TLS 1.0 or 1.1. The business risk is exposure of encrypted session data under interception conditions. It is not KEV-listed in the provided data, but affected edge infrastructure handling sensitive traffic deserves prompt review. Mitigation focus: Review the F5 advisory for fixed versions and supported configuration guidance.; Prioritize upgrades or configuration changes for affected internet-facing SSL profiles.; Disable TLS versions before 1.2 where business and client compatibility allow..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.