Approved changes feed: RSS · Atom

cpe:2.3:a:f5:big-ip_apm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductBig Ip Apm (0c68cd35-5fc3-596d-8c53-8dedd2a063e3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-35245 not_vulnerable 2026-06-08 05:46:04.347797 BIG-IP APM access policy vulnerability CVE-2022-35245
HIGH (7.5)
In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5.1, when a BIG-IP APM access policy is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2022-08-04T17:49:32.276Z
Updated: 2024-09-16T20:48:20.287Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33203 not_vulnerable 2026-06-08 05:44:46.496021 BIG-IP APM and F5 SSL Orchestrator vulnerability CVE-2022-33203
HIGH (7.5)
In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when a BIG-IP APM access policy with Service Connect agent is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2022-08-04T17:46:20.481Z
Updated: 2024-09-17T03:38:18.177Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31473 not_vulnerable 2026-06-08 05:43:40.836253 BIG-IP APM Appliance mode vulnerability CVE-2022-31473
MEDIUM (6.8)
In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated attacker may be able to bypass Appliance mode restrictions due to a directory traversal vulnerability in an undisclosed page within iApps. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2022-08-04T17:45:54.843Z
Updated: 2024-09-17T03:44:13.790Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29263 vulnerable 2026-06-08 05:42:47.498122 Details available
HIGH (7.8)
On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, the BIG-IP Edge Client Component Installer Service does not use best practice while saving temporary files. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:43:25.102Z
Updated: 2024-09-16T23:27:04.518Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28714 vulnerable 2026-06-08 05:42:45.193142 Details available
HIGH (7.3)
On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, a DLL Hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:40:53.297Z
Updated: 2024-09-16T17:18:27.730Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27636 vulnerable 2026-06-08 05:42:42.562189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27634 not_vulnerable 2026-06-08 05:42:42.545996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27230 vulnerable 2026-06-08 05:41:55.046818 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27181 vulnerable 2026-06-08 05:41:54.897669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5853 vulnerable 2026-06-08 05:26:44.030970 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6609 vulnerable 2026-06-08 05:14:12.527180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19150 vulnerable 2026-06-08 05:13:21.556979 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6168 vulnerable 2026-06-08 05:09:50.890506 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-6166 vulnerable 2026-06-08 05:09:50.880512 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.