Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Mitigating OWASP API Security Risk: Excessive Data Exposure using F5 XC Platform

This is part of the OWASP API Security TOP 10 mitigation series, and you can refer here for an overview of these categories and F5 Distributed Cloud Platform (F5 XC) Web Application and API protect...
Fig 1: App UI exposing PII
Updated May 14, 2025
Version 5.0
cloud
devops
F5 Distributed Cloud
F5 Distributed Cloud WAAP
OWASP-API-Security
security
series-f5-distributed-cloud
series-owasp-oat
Verified Designs
Nikoolayy1's avatar
Nikoolayy1
Icon for MVP rankMVP
Dec 14, 2023

Great article Janibasha ! It will be great if XC Data Guard can also support custom regex expressions as I see some use cases for this. I think the new F5 XC API Discovery sensitive data feature supports custom patterns and I think it could be easy to add this also to Data Guard. Maybe also triggering Malicius users with Data Guard not in Blocking mode as for some strings that are not so sensitve but someone is getting this sting many times, they could be doing an attack 😃