Skip to content
fr Sign in
7.4 High

CVE-2024-28883 An origin validation vulnerability exists in BIG-IP APM browser network access VPN client for Windows, macOS and…

Description

An origin validation vulnerability exists in BIG-IP APM browser network access VPN client for Windows, macOS and Linux which may allow an attacker to bypass F5 endpoint inspection. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Affected products and versions

Product Affected versions Fixed in
BIG-IP Edge Client 7.2 7.2.3 → < 7.2.4.4 7.2.4.4
BIG-IP 17.1 17.1.0 → < 17.1.1 17.1.1
BIG-IP 16.1 16.1.0 → < 16.1.4.2 16.1.4.2
BIG-IP 15.1 15.1.0 → < 15.1.10.3 15.1.10.3
apm_clients 7.2 7.2.3 → 7.2.4 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of BIG-IP Edge Client

The 11 CVEs of BIG-IP Edge Client →
CVE-2026-20730 A vulnerability exists in BIG-IP Edge Client and browser VPN clients on Windows that may allow attackers to gain… 3.3 Low CVE-2025-48500 A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local,… 7.3 High CVE-2023-43611 The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the… 7.8 High CVE-2023-5450 An insufficient verification of data vulnerability exists in BIG-IP Edge Client Installer on macOS that may allow an… 7.3 High
Track this CVE