Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Arthur_7109's avatar
Arthur_7109
Icon for Nimbostratus rankNimbostratus
Jul 06, 2011

The BIG-IP ASM attack signature engine has a limited maximum recursion depth

Hi guys,     According to sol12250   "   This behavior limits the amount of resources that can be dedicated to any one evaluation operation. Certain combinations of attack signatures and r...
app sec
BIG-IP Access Policy Manager (APM)
security
brad_11480's avatar
brad_11480
Icon for Nimbostratus rankNimbostratus
Sep 07, 2011
so wondering if 10.2.1HF3 (10.2.1 build 511.0) could be missing this fix. we are running into a lot of these when we enabled SQL injection signatures and finding that the requests aren't very complicated at all.

 

 

hate to have to turn off signatures just to make this work. defeats the purpose and the reason of having the ASM.