F5 Big-Ip Access Policy Manager vulnerabilities
623 known vulnerabilities affecting f5/big-ip_access_policy_manager.
Total CVEs
623
CISA KEV
12
actively exploited
Public exploits
20
Exploited in wild
16
Severity breakdown
CRITICAL44HIGH336MEDIUM236LOW7
Vulnerabilities
Page 32 of 32
CVE-2025-23415P4LOWCVSS 3.1≥ 15.1.0, < 15.1.10.6.0.11.6≥ 16.1.0, < 16.1.5+1 more2025-02-05
CVE-2025-23415 [LOW] CWE-345 CVE-2025-23415: An insufficient verification of data authenticity vulnerability exists in BIG-IP APM Access Policy e
An insufficient verification of data authenticity vulnerability exists in BIG-IP APM Access Policy endpoint inspection that may allow an attacker to bypass endpoint inspection checks for VPN connection initiated thru BIG-IP APM browser network access VPN client for Windows, macOS and Linux.
Note: Software versions which have reached End of Technica
nvd
CVE-2019-11109P4MEDIUMCVSS 4.4≥ 11.5.2, ≤ 11.6.5≥ 12.1.0, ≤ 12.1.5+3 more2019-12-18
CVE-2019-11109 [MEDIUM] CVE-2019-11109: Logic issue in the subsystem for Intel(R) SPS before versions SPS_E5_04.01.04.275.0, SPS_SoC-X_04.00
Logic issue in the subsystem for Intel(R) SPS before versions SPS_E5_04.01.04.275.0, SPS_SoC-X_04.00.04.100.0 and SPS_SoC-A_04.00.04.191.0 may allow a privileged user to potentially enable denial of service via local access.
nvd
CVE-2014-4027P4LOWCVSS 2.3≥ 11.1.0, ≤ 11.6.0v12.0.02014-06-23
CVE-2014-4027 [LOW] CWE-200 CVE-2014-4027: The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.1
The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly initialize a certain data structure, which allows local users to obtain sensitive information from ramdisk_mcp memory by leveraging access to a SCSI initiator.
nvd
← Previous32 / 32