F5 BIG-IP Edge vulnerabilities

3 CVEs affecting F5 BIG-IP Edge, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-22358, published 2023-02-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-5529, published 2018-07-12. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. The svpn component of the F5 BIG-IP APM client prior to version 7.1.7 for Linux and Mac OS X runs as a privileged process and can allow an unprivileged user to assume super-user privileges on the…
CVE-2023-22358, published 2023-02-01. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. In versions beginning with 7.2.2 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer. Note: Software versions which have reached End of Technical…
CVE-2023-22283, published 2023-02-01. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. On versions beginning in 7.1.5 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client for Windows. User interaction and administrative privileges are required to exploit…