[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWSFaZBiNTumokIlZTJdd7PK5heiGn7PNPAsc7gFK8xE":3,"g5a-ex:f5\u002Fbig-ip_access_policy_manager_client@*":141,"g5a-family:f5\u002Fbig-ip_access_policy_manager_client":143},{"success":4,"data":5},true,{"product":6,"versions":42,"topVulnerabilitiesByEpss":55,"kevVulnerabilities":118,"seoMetadata":119,"meta":138},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":41},"f5","big-ip_access_policy_manager_client",12,18,0,"2024-05-08",[14,18,21,23,25,27,29,31,33,35,37,39],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"7.1.5",1,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"7.1.6",2,{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},"7.1.6.1",{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},"7.1.7",{"version":26,"cve_count":16,"kev_count":11,"has_kev":17},"7.1.8",{"version":28,"cve_count":16,"kev_count":11,"has_kev":17},"7.1.8.2",{"version":30,"cve_count":16,"kev_count":11,"has_kev":17},"7.1.9",{"version":32,"cve_count":16,"kev_count":11,"has_kev":17},"7.2.1",{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.1.3",{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.3",{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.4.4",{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.6.2","Big-ip Access Policy Manager Client by F5 is a technology product with 12 tracked versions and 18 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[43,44,45,46,47,48,49,50,51,52,53,54],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},{"version":26,"cve_count":16,"kev_count":11,"has_kev":17},{"version":28,"cve_count":16,"kev_count":11,"has_kev":17},{"version":30,"cve_count":16,"kev_count":11,"has_kev":17},{"version":32,"cve_count":16,"kev_count":11,"has_kev":17},{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},{"version":38,"cve_count":11,"kev_count":11,"has_kev":17},{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},[56,64,70,78,85,91,97,103,109,114],{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":61,"severity":62,"isKev":17,"epssScore":63},"CVE-2019-6656","BIG-IP APM Edge Client before version 7.1.8 (7180.2019.508.705) logs the full apm session ID in the log files. Vulnerable versions of the client are bundled with BIG-IP APM versions 15.0.0-15.0.1, 14,1.0-14.1.0.6, 14.0.0-14.0.0.4, 13.0.0-13.1.1.5, 12.1.0-12.1.5, and 11.5.1-11.6.5. In BIG-IP APM 13.1.0 and later, the APM Clients components can be updated independently from BIG-IP software. Client version 7.1.8 (7180.2019.508.705) and later has the fix.","2019-09-25",7.5,"v3.1","High",0.01356,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":61,"severity":62,"isKev":17,"epssScore":69},"CVE-2020-5897","In versions 7.1.5-7.1.9, there is use-after-free memory vulnerability in the BIG-IP Edge Client Windows ActiveX component.","2020-05-12",8.8,0.01232,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":75,"severity":76,"isKev":17,"epssScore":77},"CVE-2018-15316","In F5 BIG-IP APM 13.0.0-13.1.1.1, APM Client 7.1.5-7.1.6, and\u002For Edge Client 7101-7160, the BIG-IP APM Edge Client component loads the policy library with user permission and bypassing the endpoint checks.","2018-10-19",5.5,"v3.0","Medium",0.00592,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"cvssVersion":61,"severity":83,"isKev":17,"epssScore":84},"CVE-2020-5893","In versions 7.1.5-7.1.8, when a user connects to a VPN using BIG-IP Edge Client over an unsecure network, BIG-IP Edge Client responds to authentication requests over HTTP while sending probes for captive portal detection.","2020-04-30",3.7,"Low",0.00575,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":61,"severity":62,"isKev":17,"epssScore":90},"CVE-2018-5546","The svpn and policyserver components of the F5 BIG-IP APM client prior to version 7.1.7.1 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host. A malicious local unprivileged user may gain knowledge of sensitive information, manipulate certain data, or assume super-user privileges on the local client host.","2018-08-17",7.8,0.00453,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":95,"cvssVersion":61,"severity":76,"isKev":17,"epssScore":96},"CVE-2022-23032","In all versions before 7.2.1.4, when proxy settings are configured in the network access resource of a BIG-IP APM system, connecting BIG-IP Edge Client on Mac and Windows is vulnerable to a DNS rebinding attack. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","2022-01-25",5.3,0.00404,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":101,"cvssVersion":61,"severity":76,"isKev":17,"epssScore":102},"CVE-2020-5855","When the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client for Windows, unauthorized users who have physical access to an authorized user's machine can get shell access under unprivileged user.","2020-02-06",4.3,0.00329,{"cveId":104,"description":105,"publishedDate":106,"cvssScore":107,"cvssVersion":75,"severity":62,"isKev":17,"epssScore":108},"CVE-2018-15332","The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged process and can allow an unprivileged user to get ownership of files owned by root on the local client host in a race condition.","2018-12-06",7,0.00319,{"cveId":110,"description":111,"publishedDate":81,"cvssScore":112,"cvssVersion":61,"severity":76,"isKev":17,"epssScore":113},"CVE-2020-5892","In versions 7.1.5-7.1.8, the BIG-IP Edge Client components in BIG-IP APM, Edge Gateway, and FirePass legacy allow attackers to obtain the full session ID from process memory.",6.7,0.00305,{"cveId":115,"description":116,"publishedDate":67,"cvssScore":89,"cvssVersion":61,"severity":62,"isKev":17,"epssScore":117},"CVE-2020-5896","On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions.",0.003,[],{"title":120,"metaDescription":121,"keywords":122,"structuredData":123},"Big-ip Access Policy Manager Client by F5 - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Big-ip Access Policy Manager Client by F5 covering 12 versions with 18 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Big-ip Access Policy Manager Client vulnerabilities, Big-ip Access Policy Manager Client security, Big-ip Access Policy Manager Client CVE, F5 Big-ip Access Policy Manager Client, Big-ip Access Policy Manager Client threat intelligence, F5 security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":124,"@type":125,"name":126,"description":121,"url":127,"manufacturer":128,"applicationCategory":132,"softwareVersion":133,"mainEntity":134},"https:\u002F\u002Fschema.org","SoftwareApplication","Big-ip Access Policy Manager Client","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ff5\u002Fbig-ip_access_policy_manager_client",{"@type":129,"name":130,"url":131},"Organization","F5","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Ff5","Security Software","12 versions tracked",{"@type":135,"name":136,"description":137,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Big-ip Access Policy Manager Client Security Vulnerabilities","Security vulnerabilities affecting Big-ip Access Policy Manager Client by F5",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":139,"apiVersion":140},"2026-10-28T14:45:15.420Z","3.0",{"rows":142,"total":11,"capped":17,"failed":11},[],[]]