Approved changes feed: RSS · Atom

cpe:2.3:a:f5:apm_clients:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductApm Clients (206adc6d-8d41-5a49-bb95-dfad9e1883be)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-28883 vulnerable 2026-06-08 06:33:27.796934 BIG-IP APM browser network access VPN client vulnerability
HIGH (7.4)
An origin validation vulnerability exists in BIG-IP APM browser network access VPN client for Windows, macOS and Linux which may allow an attacker to bypass F5 endpoint inspection. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2024-05-08T15:01:24.931Z
Updated: 2024-08-02T01:03:50.247Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22358 vulnerable 2026-06-08 05:54:24.917188 BIG-IP Edge Client for Windows vulnerability
HIGH (7.8)
In versions beginning with 7.2.2 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2023-02-01T17:54:31.501Z
Updated: 2025-03-26T18:02:11.485Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22283 vulnerable 2026-06-08 05:54:23.340556 BIG-IP Edge Client for Windows vulnerability
MEDIUM (6.5)
On versions beginning in 7.1.5 to before 7.2.3.1, a DLL hijacking vulnerability exists in the BIG-IP Edge Client for Windows. User interaction and administrative privileges are required to exploit this vulnerability because the victim user needs to run the executable on the system and the attacker requires administrative privileges for modifying the files in the trusted search path. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2023-02-01T17:52:57.233Z
Updated: 2025-03-26T18:43:36.643Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.