F5 Access Policy Manager Clients — known CVE vulnerabilities

Every CVE whose affected-product data names F5 Access Policy Manager Clients, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2021-22980 — CVSS 7.8 (high): In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1.8.5, an untrusted search path…
• CVE-2022-29263 — CVSS 7.8 (high): On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions…
• CVE-2023-38418 — CVSS 7.8 (high): The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. Note…
• CVE-2023-36858 — CVSS 7.1 (high): An insufficient verification of data vulnerability exists in BIG-IP Edge Client for Windows and macOS that may allow an attacker to modify…
• CVE-2021-23002 — CVSS 4.5 (medium): When using BIG-IP APM 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, or all 12.1.x and…