[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWSFaZBiNTumokIlZTJdd7PK5heiGn7PNPAsc7gFK8xE":3,"g5a-ex:f5\u002Fbig-ip_access_policy_manager_client@*":142,"g5a-family:f5\u002Fbig-ip_access_policy_manager_client":144},{"success":4,"data":5},true,{"product":6,"versions":42,"topVulnerabilitiesByEpss":55,"kevVulnerabilities":119,"seoMetadata":120,"meta":139},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":41},"f5","big-ip_access_policy_manager_client",12,18,0,"2024-05-08",[14,18,21,23,25,27,29,31,33,35,37,39],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"7.1.5",1,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"7.1.6",2,{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},"7.1.6.1",{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},"7.1.7",{"version":26,"cve_count":16,"kev_count":11,"has_kev":17},"7.1.8",{"version":28,"cve_count":16,"kev_count":11,"has_kev":17},"7.1.8.2",{"version":30,"cve_count":16,"kev_count":11,"has_kev":17},"7.1.9",{"version":32,"cve_count":16,"kev_count":11,"has_kev":17},"7.2.1",{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.1.3",{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.3",{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.4.4",{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.6.2","Big-ip Access Policy Manager Client by F5 is a technology product with 12 tracked versions and 18 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[43,44,45,46,47,48,49,50,51,52,53,54],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},{"version":26,"cve_count":16,"kev_count":11,"has_kev":17},{"version":28,"cve_count":16,"kev_count":11,"has_kev":17},{"version":30,"cve_count":16,"kev_count":11,"has_kev":17},{"version":32,"cve_count":16,"kev_count":11,"has_kev":17},{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},[56,64,70,78,85,91,97,103,109,114],{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":61,"severity":62,"isKev":17,"epssScore":63},"CVE-2019-6656","BIG-IP APM Edge Client before version 7.1.8 (7180.2019.508.705) logs the full apm session ID in the log files. Vulnerable versions of the client are bundled with BIG-IP APM versions 15.0.0-15.0.1, 14,1.0-14.1.0.6, 14.0.0-14.0.0.4, 13.0.0-13.1.1.5, 12.1.0-12.1.5, and 11.5.1-11.6.5. In BIG-IP APM 13.1.0 and later, the APM Clients components can be updated independently from BIG-IP software. Client version 7.1.8 (7180.2019.508.705) and later has the fix.","2019-09-25",7.5,"v3.1","High",0.01356,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":61,"severity":62,"isKev":17,"epssScore":69},"CVE-2020-5897","In versions 7.1.5-7.1.9, there is use-after-free memory vulnerability in the BIG-IP Edge Client Windows ActiveX component.","2020-05-12",8.8,0.01202,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":75,"severity":76,"isKev":17,"epssScore":77},"CVE-2018-15316","In F5 BIG-IP APM 13.0.0-13.1.1.1, APM Client 7.1.5-7.1.6, and\u002For Edge Client 7101-7160, the BIG-IP APM Edge Client component loads the policy library with user permission and bypassing the endpoint checks.","2018-10-19",5.5,"v3.0","Medium",0.00592,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"cvssVersion":61,"severity":83,"isKev":17,"epssScore":84},"CVE-2020-5893","In versions 7.1.5-7.1.8, when a user connects to a VPN using BIG-IP Edge Client over an unsecure network, BIG-IP Edge Client responds to authentication requests over HTTP while sending probes for captive portal detection.","2020-04-30",3.7,"Low",0.00561,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":61,"severity":62,"isKev":17,"epssScore":90},"CVE-2018-5546","The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information, manipulate certain data, or assume super-user privileges on the local client host.","2018-08-17",7.8,0.00453,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":95,"cvssVersion":61,"severity":76,"isKev":17,"epssScore":96},"CVE-2022-23032","In all versions before 7.2.1.4, when proxy settings are configured in the network access resource of a BIG-IP APM system, connecting BIG-IP Edge Client on Mac and Windows is vulnerable to a DNS rebinding attack. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","2022-01-25",5.3,0.00404,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":101,"cvssVersion":61,"severity":76,"isKev":17,"epssScore":102},"CVE-2020-5855","When the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client for Windows, unauthorized users who have physical access to an authorized user's machine can get shell access under unprivileged user.","2020-02-06",4.3,0.00329,{"cveId":104,"description":105,"publishedDate":106,"cvssScore":107,"cvssVersion":75,"severity":62,"isKev":17,"epssScore":108},"CVE-2018-15332","The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host in a race condition.","2018-12-06",7,0.00319,{"cveId":110,"description":111,"publishedDate":81,"cvssScore":112,"cvssVersion":61,"severity":76,"isKev":17,"epssScore":113},"CVE-2020-5892","In versions 7.1.5-7.1.8, the BIG-IP Edge Client components in BIG-IP APM, Edge Gateway, and FirePass legacy allow attackers to obtain the full session ID from process memory.",6.7,0.00306,{"cveId":115,"description":116,"publishedDate":117,"cvssScore":89,"cvssVersion":61,"severity":62,"isKev":17,"epssScore":118},"CVE-2022-28714","On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, a DLL Hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated","2022-05-05",0.00288,[],{"title":121,"metaDescription":122,"keywords":123,"structuredData":124},"Big-ip Access Policy Manager Client by F5 - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Big-ip Access Policy Manager Client by F5 covering 12 versions with 18 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Big-ip Access Policy Manager Client vulnerabilities, Big-ip Access Policy Manager Client security, Big-ip Access Policy Manager Client CVE, F5 Big-ip Access Policy Manager Client, Big-ip Access Policy Manager Client threat intelligence, F5 security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":125,"@type":126,"name":127,"description":122,"url":128,"manufacturer":129,"applicationCategory":133,"softwareVersion":134,"mainEntity":135},"https:\u002F\u002Fschema.org","SoftwareApplication","Big-ip Access Policy Manager Client","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ff5\u002Fbig-ip_access_policy_manager_client",{"@type":130,"name":131,"url":132},"Organization","F5","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Ff5","Security Software","12 versions tracked",{"@type":136,"name":137,"description":138,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Big-ip Access Policy Manager Client Security Vulnerabilities","Security vulnerabilities affecting Big-ip Access Policy Manager Client by F5",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":140,"apiVersion":141},"2026-10-28T15:05:33.648Z","3.0",{"rows":143,"total":11,"capped":17,"failed":11},[],[]]