Last Modified: Oct 11, 2026
Affected Product(s):
BIG-IP AFM
Known Affected Versions:
17.5.1.8, 17.5.1.9
Opened: Sep 04, 2026 Severity: 2-Critical
IP::reputation lookup call in iRule throws an exception when no IP-reputation database is loaded even though IPI is licensed/subscribed. To handle such cases, the caller must wrap the call with a catch clause & take the appropriate action IP::reputation [client_addr] Recommend wrapping the call in a catch clause - if { [catch { IP::reputation [client_addr] } ip_reputation] } {
iRule script that uses the IP::reputation call without a catch clause might terminate early, without taking the intended action when no database is available, and can sometimes take the wrong action in the script by not allowing a flow
- IPI subscribed - iRule call IP::reputation will throw an exception when no IP reputation database is loaded
Recommend wrapping the call in a catch clause & take appropriate action on the exception if { [catch { IP::reputation [client_addr] } ip_reputation] } {
None