F5 Access Policy Manager Clients vulnerabilities

5 CVEs affecting F5 Access Policy Manager Clients, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-38418, published 2023-08-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-23002, published 2021-03-31. Medium severity, CVSS 4.5. EPSS: 0.3% chance of exploitation in the next 30 days. When using BIG-IP APM 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, or all 12.1.x and 11.6.x versions or Edge Client versions 7.2.1.x before 7.2.1.1,…
CVE-2021-22980, published 2021-02-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1.8.5, an untrusted search path vulnerability in the BIG-IP APM Client Troubleshooting Utility (CTU)…
CVE-2022-29263, published 2022-05-05. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as…
CVE-2023-38418, published 2023-08-02. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. Note: Software versions which have reached End of Technical…
CVE-2023-36858, published 2023-08-02. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. An insufficient verification of data vulnerability exists in BIG-IP Edge Client for Windows and macOS that may allow an attacker to modify its configured server list. Note: Software versions which…