CVSS: 7.8EPSS: 0%CPEs: 39EXPL: 0CVE-2022-28714
https://notcve.org/view.php?id=CVE-2022-28714
05 May 2022 — On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, a DLL Hijacking vulnerability exists in the BIG-IP Edge Client Windows Installer. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated En F5 BIG-IP APM versiones 16.1.x anteriores a 16.1.2.2, en las versiones 15.1.... • https://support.f5.com/csp/article/K54460845 • CWE-427: Uncontrolled Search Path Element •
CVSS: 5.5EPSS: 0%CPEs: 33EXPL: 0CVE-2022-27636
https://notcve.org/view.php?id=CVE-2022-27636
05 May 2022 — On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, BIG-IP Edge Client may log sensitive APM session-related information when VPN is launched on a Windows system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated En F5 BIG-IP APM versiones 16.1.x anteriores a 16.... • https://support.f5.com/csp/article/K57110035 • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 5.3EPSS: 0%CPEs: 8EXPL: 0CVE-2022-23032
https://notcve.org/view.php?id=CVE-2022-23032
25 Jan 2022 — In all versions before 7.2.1.4, when proxy settings are configured in the network access resource of a BIG-IP APM system, connecting BIG-IP Edge Client on Mac and Windows is vulnerable to a DNS rebinding attack. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. En todas las versiones anteriores a la 7.2.1.4, cuando son configurados los ajustes del proxy en el recurso de acceso a la red de un sistema BIG-IP APM, la conexión de BIG-IP Edge Client en Mac y Windows es... • https://support.f5.com/csp/article/K30525503 • CWE-346: Origin Validation Error •
CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0CVE-2021-23022
https://notcve.org/view.php?id=CVE-2021-23022
10 Jun 2021 — On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, the BIG-IP Edge Client Windows Installer Service's temporary folder has weak file and folder permissions. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. En las versiones 7.2.1.x anteriores a 7.2.1.3 y versiones 7.1.x anteriores a 7.1.9.9 Update 1, la carpeta temporal del servicio de instalación de Windows de BIG-IP Edge Client tiene permisos débiles de archivos y carpetas. Nota: Las versiones ... • https://support.f5.com/csp/article/K08503505 • CWE-732: Incorrect Permission Assignment for Critical Resource •
CVSS: 5.5EPSS: 0%CPEs: 6EXPL: 0CVE-2020-5898
https://notcve.org/view.php?id=CVE-2020-5898
12 May 2020 — In versions 7.1.5-7.1.9, BIG-IP Edge Client Windows Stonewall driver does not sanitize the pointer received from the userland. A local user on the Windows client system can send crafted DeviceIoControl requests to \\.\urvpndrv device causing the Windows kernel to crash. En versiones 7.1.5 hasta 7.1.9, el controlador BIG-IP Edge Client Windows Stonewall, no sanea el puntero recibido desde el userland. Un usuario local en el sistema cliente de Windows puede enviar peticiones DeviceIoControl hacia el dispositi... • https://support.f5.com/csp/article/K69154630 •
CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 0CVE-2020-5896
https://notcve.org/view.php?id=CVE-2020-5896
12 May 2020 — On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions. En versiones 7.1.5-7.1.9, la carpeta temporal del Windows Installer Service de BIG-IP Edge Client, presenta permisos débiles de archivo y carpeta. • https://support.f5.com/csp/article/K15478554 • CWE-276: Incorrect Default Permissions •
CVSS: 8.8EPSS: 0%CPEs: 6EXPL: 0CVE-2020-5897
https://notcve.org/view.php?id=CVE-2020-5897
12 May 2020 — In versions 7.1.5-7.1.9, there is use-after-free memory vulnerability in the BIG-IP Edge Client Windows ActiveX component. En versiones 7.1.5 hasta 7.1.9, se presenta una vulnerabilidad de uso de la memoria previamente liberada en el componente BIG-IP Edge Client Windows ActiveX. • https://support.f5.com/csp/article/K20346072 • CWE-416: Use After Free •
CVSS: 4.3EPSS: 0%CPEs: 6EXPL: 0CVE-2020-5893
https://notcve.org/view.php?id=CVE-2020-5893
30 Apr 2020 — In versions 7.1.5-7.1.8, when a user connects to a VPN using BIG-IP Edge Client over an unsecure network, BIG-IP Edge Client responds to authentication requests over HTTP while sending probes for captive portal detection. En las versiones 7.1.5 hasta 7.1.8, cuando un usuario se conecta a una VPN usando BIG-IP Edge Client por medio de una red no segura, BIG-IP Edge Client responde a las peticiones de autenticación por medio de HTTP mientras envía sondas para la detección del portal cautivo. • https://support.f5.com/csp/article/K97733133 • CWE-319: Cleartext Transmission of Sensitive Information •