7.8
High
CVE-2022-29263 On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to…
Description
On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, the BIG-IP Edge Client Component Installer Service does not use best practice while saving temporary files. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BIG-IP APM 17.0 | earliest → < 17.0.0 | 17.0.0 |
| BIG-IP APM 16.1 | 16.1.x → < 16.1.2.2 | 16.1.2.2 |
| BIG-IP APM 15.1 | 15.1.x → < 15.1.5.1 | 15.1.5.1 |
| BIG-IP APM 14.1 | 14.1.x → < 14.1.4.6 | 14.1.4.6 |
| BIG-IP APM 13.1 | 13.1.x → < 13.1.5 | 13.1.5 |
| BIG-IP APM | 12.1.x | No fix stated |
| BIG-IP APM | 11.6.x | No fix stated |
| BIG-IP APM Clients 7 | 7.x → < 7.2.1.5 | 7.2.1.5 |
Other CVEs of BIG-IP APM
The 12 CVEs of BIG-IP APM →
CVE-2022-35245
In BIG-IP Versions 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5.1, when a BIG-IP APM…
7.5
High
CVE-2022-33203
In BIG-IP Versions 16.1.x before 16.1.3, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when a BIG-IP APM access…
7.5
High
CVE-2022-31473
In BIG-IP Versions 16.1.x before 16.1.1 and 15.1.x before 15.1.4, when running in Appliance mode, an authenticated…
6.8
Medium
CVE-2022-28714
On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to…
7.3
High