F5 BIG-IP APM
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-35245 | 14.1.x – < 14.1.5.1 ; 15.1.x – < 15.1.6.1 ; 16.1.x – < 16.1.3.1 | BIG-IP APM access policy vulnerability CVE-2022-35245 | HIGH 7.5 | 0.8 % | ||
| CVE-2022-33203 | 14.1.x – < 14.1.5 ; 15.1.x – < 15.1.6.1 ; 16.1.x – < 16.1.3 | BIG-IP APM and F5 SSL Orchestrator vulnerability CVE-2022-33203 | HIGH 7.5 | 0.8 % | ||
| CVE-2022-31473 | 15.1.x – < 15.1.4 ; 16.1.x – < 16.1.1 | BIG-IP APM Appliance mode vulnerability CVE-2022-31473 | HIGH 7.7 | 2.1 % | ||
| CVE-2022-29263 | 12.1.x ; 11.6.x ; 16.1.x – < 16.1.2.2 ; … | On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions pr | HIGH 7.8 | 0.2 % | ||
| CVE-2022-28714 | 12.1.x ; 11.6.x ; 16.1.x – < 16.1.2.2 ; … | On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions pr | HIGH 7.8 | 0.3 % | ||
| CVE-2022-27636 | 12.1.x ; 11.6.x ; 16.1.x – < 16.1.2.2 ; … | On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions pr | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-27634 | 16.1.x – < 16.1.2.2 ; 15.1.x – < 15.1.5.1 | On 16.1.x versions prior to 16.1.2.2 and 15.1.x versions prior to 15.1.5.1, BIG-IP APM does not properly validate configurations, allowing a | HIGH 7.2 | 1.4 % | ||
| CVE-2022-27230 | 16.1.x ; 15.1.x ; 14.1.x ; … | On all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP APM, and F5 BIG-IP Guided Configuration (GC) all versions | HIGH 7.5 | 0.5 % | ||
| CVE-2022-27181 | 12.1.x ; 11.6.x ; 16.1.x – < 16.1.2.2 ; … | On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions pr | MEDIUM 5.3 | 0.9 % | ||
| CVE-2020-5853 | 15.0.0-15.1.0 ; 14.0.0-14.1.2.3 ; 13.1.0-13.1.3.2 ; … | In BIG-IP APM portal access on versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, when backend se | MEDIUM 5.4 | 0.5 % | ||
| CVE-2019-19150 | 15.0.0-15.0.1.1 ; 14.1.0-14.1.2 ; 14.0.0-14.0.1 ; … | On versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, the BIG-IP APM system logs t | MEDIUM 4.9 | 0.8 % | ||
| CVE-2019-6609 | 14.0.0-14.1.0.1 ; 13.0.0-13.1.1.3 ; 12.1.1 HF2-12.1.4 | Platform dependent weakness. This issue only impacts iSeries platforms. On these platforms, in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, D | CRITICAL 9.8 | 1.5 % |