Known Vulnerabilities for Big-ip Access Policy Manager Client by F5
Listed below are 10 of the newest known vulnerabilities associated with "Big-ip Access Policy Manager Client" by "F5".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-43125 json | BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Techni... | 8.2 - HIGH | 2023-09-27 | 2023-10-02 |
| CVE-2023-43124 json | BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Techn... | 7.1 - HIGH | 2023-09-27 | 2023-09-29 |
| CVE-2022-28714 json | On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.... | 7.8 - HIGH | 2022-05-05 | 2022-05-12 |
| CVE-2022-27636 json | On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.... | 5.5 - MEDIUM | 2022-05-05 | 2023-01-24 |
| CVE-2022-23032 json | In all versions before 7.2.1.4, when proxy settings are configured in the network access resource of a BIG-IP APM system, con... | 5.3 - MEDIUM | 2022-01-25 | 2022-02-01 |
| CVE-2021-23022 json | On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, the BIG-IP Edge Client Windows Installer Service's tempo... | 7.8 - HIGH | 2021-06-10 | 2021-06-23 |
| CVE-2020-5898 json | In versions 7.1.5-7.1.9, BIG-IP Edge Client Windows Stonewall driver does not sanitize the pointer received from the userland... | 5.5 - MEDIUM | 2020-05-12 | 2020-05-14 |
| CVE-2020-5897 json | In versions 7.1.5-7.1.9, there is use-after-free memory vulnerability in the BIG-IP Edge Client Windows ActiveX component. | 8.8 - HIGH | 2020-05-12 | 2020-05-14 |
| CVE-2020-5896 json | On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permi... | 7.8 - HIGH | 2020-05-12 | 2020-05-14 |
| CVE-2020-5893 json | In versions 7.1.5-7.1.8, when a user connects to a VPN using BIG-IP Edge Client over an unsecure network, BIG-IP Edge Client ... | 3.7 - LOW | 2020-04-30 | 2021-07-21 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | F5 | Big-ip Access Policy Manager Client | 7.1.9 | |||
| Application | F5 | Big-ip Access Policy Manager Client | 7.1.8.2 | |||
| Application | F5 | Big-ip Access Policy Manager Client | 7.1.8 | |||
| Application | F5 | Big-ip Access Policy Manager Client | 7.1.7 | |||
| Application | F5 | Big-ip Access Policy Manager Client | 7.1.6.1 | |||
| Application | F5 | Big-ip Access Policy Manager Client | 7.1.6 | |||
| Application | F5 | Big-ip Access Policy Manager Client | 7.1.5 |