F5 BIG-IP Access Policy Manager (APM) Client 7.1.9

CPE Details

F5 BIG-IP Access Policy Manager (APM) Client 7.1.9
f5
big-ip_access_policy_manager_client
7.1.9
2020-05-07
16h20 +00:00
2020-05-07
16h20 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:f5:big-ip_access_policy_manager_client:7.1.9:*:*:*:*:*:*:*

Informations

Vendor

f5

Product

big-ip_access_policy_manager_client

Version

7.1.9

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-28714 2022-05-05 16h40 +00:00 On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, a DLL Hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
7.8
High
CVE-2022-27636 2022-05-05 16h13 +00:00 On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, BIG-IP Edge Client may log sensitive APM session-related information when VPN is launched on a Windows system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
5.5
Medium
CVE-2022-23032 2022-01-25 18h11 +00:00 In all versions before 7.2.1.4, when proxy settings are configured in the network access resource of a BIG-IP APM system, connecting BIG-IP Edge Client on Mac and Windows is vulnerable to a DNS rebinding attack. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
5.3
Medium
CVE-2021-23022 2021-06-10 13h06 +00:00 On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, the BIG-IP Edge Client Windows Installer Service's temporary folder has weak file and folder permissions. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
7.8
High
CVE-2020-5898 2020-05-12 13h27 +00:00 In versions 7.1.5-7.1.9, BIG-IP Edge Client Windows Stonewall driver does not sanitize the pointer received from the userland. A local user on the Windows client system can send crafted DeviceIoControl requests to \\.\urvpndrv device causing the Windows kernel to crash.
5.5
Medium
CVE-2020-5896 2020-05-12 13h24 +00:00 On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions.
7.8
High
CVE-2020-5897 2020-05-12 13h20 +00:00 In versions 7.1.5-7.1.9, there is use-after-free memory vulnerability in the BIG-IP Edge Client Windows ActiveX component.
8.8
High