Skip to contentF5 Big-ip Apm vulnerabilities
- f5 big-ip, big-ip apm, big-ip access policy manager +2 moreBIG-IP APM OAuth vulnerabilityCVE-2026-94127In KEVPublic exploitEPSS 26.6%9.3 Critical
- f5 big-ip apm, big-ip access policy manager +1 moreBIG-IP APM access policy vulnerability CVE-2022-35245CVE-2022-352457.5 High
- f5 big-ip apm, big-ip access policy manager, big-ip ssl orchestrator +2 moreBIG-IP APM and F5 SSL Orchestrator vulnerability CVE-2022-33203CVE-2022-332037.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreBIG-IP APM Appliance mode vulnerability CVE-2022-31473CVE-2022-314736.8 Medium
- f5 big-ip apm, big-ip apm clients, access policy manager clients +1 more +3 moreOn F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x...CVE-2022-292637.8 High
- f5 big-ip apm, big-ip apm clients, big-ip access policy manager +1 more +3 moreOn F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x...CVE-2022-287147.3 High
- f5 big-ip apm, big-ip apm clients, big-ip access policy manager +1 more +3 moreOn F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x...CVE-2022-276365.5 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreOn 16.1.x versions prior to 16.1.2.2 and 15.1.x versions prior to 15.1.5.1, BIG-IP APM does not...CVE-2022-276346.5 Medium
- f5 big-ip apm, big-ip guided configuration (gc), big-ip guided configuration +1 more +3 moreOn all versions of 16.1.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x of F5 BIG-IP APM, and F5...CVE-2022-272307.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreOn F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x...CVE-2022-271815.3 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreOn versions 16.1.x before 16.1.2 and 15.1.x before 15.1.4.1, when BIG-IP APM portal access is...CVE-2022-230146.5 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreOn version 16.x before 16.1.0, 15.1.x before 15.1.4, 14.1.x before 14.1.4.4, and all versions of...CVE-2021-230546.1 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreOn version 16.x before 16.1.0, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, and all versions...CVE-2021-230475.3 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreOn version 14.1.x before 14.1.4.4 and all versions of 13.1.x, an open redirect vulnerability...CVE-2021-230526.1 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreOn BIG-IP APM versions 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, and...CVE-2021-230165.3 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreOn version 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6...CVE-2021-230089.8 Critical
- f5 big-ip apm, big-ip application security manager +1 moreOn BIG-IP APM version 16.0.x before 16.0.1.1, under certain conditions, when processing VPN...CVE-2021-229857.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreIn versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.2,...CVE-2020-277296.1 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreIn BIG-IP APM versions 15.0.0-15.0.1.3, 14.1.0-14.1.3, and 13.1.0-13.1.3.4, under certain...CVE-2020-277226.5 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreIn versions 14.1.0-14.1.3 and 13.1.0-13.1.3.4, a BIG-IP APM virtual server processing PingAccess...CVE-2020-277237.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreOn versions 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.5, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2...CVE-2020-277167.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreIn versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-14.1.3, 13.1.0-13.1.3.4, and 12.1.0-12.1.5.2...CVE-2020-277266.1 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreIn BIG-IP APM versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.3, 13.1.0...CVE-2020-277246.5 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreOn BIG-IP APM 15.1.0-15.1.0.5, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when multiple HTTP requests...CVE-2020-59346.5 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreIn BIG-IP APM versions 12.1.0-12.1.5.1 and 11.6.1-11.6.5.2, RADIUS authentication leaks memory...CVE-2020-59245.3 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreIn versions 15.1.0-15.1.0.4, rendering of certain session variables by BIG-IP APM UI-based agents...CVE-2020-59197.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreOn versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, in BIG-IP APM portal access, a...CVE-2020-58895.4 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreOn BIG-IP APM 15.0.0-15.0.1.2, 14.1.0-14.1.2.3, and 14.0.0-14.0.1, in certain circumstances, an...CVE-2020-58747.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreIn BIG-IP APM portal access on versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0...CVE-2020-58535.4 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreOn versions 15.0.0-15.0.1.1, 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11...CVE-2019-191504.9 Medium
- f5 big-ip apm edge client, big-ip access policy manager +1 moreThe BIG-IP APM Edge Client for macOS bundled with BIG-IP APM 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0...CVE-2019-66685.5 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreWhen the BIG-IP APM 14.1.0-14.1.2, 14.0.0-14.0.1, 13.1.0-13.1.3.1, 12.1.0-12.1.4.1, or 11.5.1-11...CVE-2019-66617.5 High
- f5 big-ip apm edge client, big-ip access policy manager, big-ip access policy manager client +2 moreBIG-IP APM Edge Client before version 7.1.8 (7180.2019.508.705) logs the full apm session ID in...CVE-2019-66567.5 High
- f5 big-ip apm, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 morePlatform dependent weakness. This issue only impacts iSeries platforms. On these platforms, in...CVE-2019-66099.8 Critical
- f5 big-ip apm clients, big-ip edge client, big-ip access policy manager +2 more +4 moreIn F5 BIG-IP APM 13.0.0-13.1.1.1, APM Client 7.1.5-7.1.6, and/or Edge Client 7101-7160, the BIG...CVE-2018-153165.5 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreOn BIG-IP APM 11.6.0-11.6.3.1, 12.1.0-12.1.3.3, 13.0.0, and 13.1.0-13.1.0.3, APMD may core when...CVE-2018-55497.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreOn BIG-IP APM 11.6.0-11.6.3, an insecure AES ECB mode is used for orig_uri parameter in an...CVE-2018-55486.1 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreA vulnerability in BIG-IP APM portal access 11.5.1-11.5.7, 11.6.0-11.6.3, and 12.1.0-12.1.3...CVE-2018-153104.3 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreIn F5 BIG-IP APM software version 13.0.0 and 12.1.2, under rare conditions, the BIG-IP APM system...CVE-2017-61395.9 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreIn F5 BIG-IP APM software version 13.0.0 and 12.1.2, in some circumstances, APM tunneled VPN...CVE-2017-61297.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreIn F5 BIG-IP APM software versions 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0...CVE-2017-03017.6 High
- f5 big-ip apm, big-ip access policy manager +1 moreIn F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established...CVE-2017-03025.3 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreIn F5 BIG-IP APM 12.0.0 through 12.1.2, non-authenticated users may be able to inject JavaScript...CVE-2016-92576.1 Medium