Approved changes feed: RSS · Atom

cpe:2.3:a:f5:big-ip_access_policy_manager:11.6.3:*:*:*:*:*:*:*

part: a version: 11.6.3 update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductBig Ip Access Policy Manager (78341655-a047-5c86-a17e-6a3bb8e6914c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-29491 vulnerable 2026-06-08 05:42:48.064454 Details available
HIGH (7.5)
On F5 BIG-IP LTM, Advanced WAF, ASM, or APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.6, and all versions of 13.1.x, 12.1.x, and 11.6.x, when a virtual server is configured with HTTP, TCP on one side (client/server), and DTLS on the other (server/client), undisclosed requests can cause the TMM process to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:49:14.729Z
Updated: 2024-09-16T18:03:59.842Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29480 vulnerable 2026-06-08 05:42:48.004911 Details available
MEDIUM (5.3)
On F5 BIG-IP 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when multiple route domains are configured, undisclosed requests to big3d can cause an increase in CPU resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:47:53.227Z
Updated: 2024-09-17T04:29:06.587Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29479 vulnerable 2026-06-08 05:42:47.959893 Details available
MEDIUM (5.3)
On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Management all versions of 8.x and 7.x, when an IPv6 self IP address is configured and the ipv6.strictcompliance database key is enabled (disabled by default) on a BIG-IP system, undisclosed packets may cause decreased performance. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:45:58.183Z
Updated: 2024-09-17T01:01:23.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29474 vulnerable 2026-06-08 05:42:47.835644 Details available
MEDIUM (4.3)
On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, a directory traversal vulnerability exists in iControl SOAP that allows an authenticated attacker with at least guest role privileges to read wsdl files in the BIG-IP file system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:45:00.544Z
Updated: 2024-09-17T03:42:46.407Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29263 vulnerable 2026-06-08 05:42:47.503056 Details available
HIGH (7.8)
On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, the BIG-IP Edge Client Component Installer Service does not use best practice while saving temporary files. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:43:25.102Z
Updated: 2024-09-16T23:27:04.518Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28714 vulnerable 2026-06-08 05:42:45.193419 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27636 vulnerable 2026-06-08 05:42:42.565625 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27189 vulnerable 2026-06-08 05:41:54.929490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26835 vulnerable 2026-06-08 05:41:53.255061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26372 vulnerable 2026-06-08 05:41:51.382954 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26340 vulnerable 2026-06-08 05:41:51.027775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26071 vulnerable 2026-06-08 05:41:50.290191 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1468 vulnerable 2026-06-08 05:39:13.211849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1389 vulnerable 2026-06-08 05:39:12.854846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.