Last Modified: Apr 09, 2026
Affected Product(s):
BIG-IP TMOS
Opened: Dec 02, 2025 Severity: 3-Major
Bot defense Javascript injection does not occur if the HTML pages are compressed.
Compressed html page is sent to the client without the injected Javascript. As a result, Bot Defense checks are not performed for sessions that serve compressed HTML pages from the backend server.
Virtual server is configured with a bot defense profile. Virtual server serving content from a backend server that serves compressed html pages.
None
None