F5 Access vulnerabilities

3 known vulnerabilities affecting f5/f5_access.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH3

Vulnerabilities

Page 1 of 1

CVE-2025-54809HIGHCVSS 8.8≥ 3.1.0, < 3.1.22025-08-13

CVE-2025-54809 [HIGH] CWE-295 CVE-2025-54809: F5 Access for Android before version 3.1.2 which uses HTTPS does not verify the remote endpoint iden F5 Access for Android before version 3.1.2 which uses HTTPS does not verify the remote endpoint identity. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVE-2023-43125HIGHCVSS 8.2≥ 3.0, < *2023-09-27

CVE-2023-43125 [MEDIUM] CWE-319 CVE-2023-43125: BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which ha BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

CVE-2023-43124HIGHCVSS 7.1≥ 3.0, < *2023-09-27

CVE-2023-43124 [MEDIUM] CWE-319 CVE-2023-43124: BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which ha BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated