f5 big-ip access policy manager client
productUScpe:2.3:a:f5:big-ip_access_policy_manager_client:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
0
critical
by severity
0critical10high6medium1low
updated 2026-10-28
01
vulnerabilities (20)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2019-6656US | high7.5 | — |
| CVE-2020-5897US | high8.8 | — |
| CVE-2018-15316US | medium5.5 | — |
| CVE-2020-5893US | low3.7OT elevated | — |
| CVE-2018-5546US | high7.8 | — |
| CVE-2022-23032US | medium5.3 | — |
| CVE-2020-5855US | medium4.3 | — |
| CVE-2018-15332US | high7.0 | — |
| CVE-2020-5892US | medium6.7OT elevated | — |
| CVE-2022-28714US | high7.8 | — |
| CVE-2020-5896US | high7.8OT elevated | — |
| CVE-2023-43125US | high8.2OT elevated | — |
| CVE-2018-5547US | high7.8OT elevated | — |
| CVE-2020-5898US | medium5.5 | — |
| CVE-2022-27636US | medium5.5 | — |
| CVE-2021-23022US | high7.8 | — |
| CVE-2024-28883US | — | — |
| CVE-2023-43124US | high7.1OT elevated | — |
| CVE-2026-20730US | — | — |
| CVE-2025-48500US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-319Cleartext Transmission of Sensitive Information3 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
- CWE-346Origin Validation Error2 CVEs
- CWE-532Insertion of Sensitive Information into Log File2 CVEs
- CWE-732Incorrect Permission Assignment for Critical Resource2 CVEs
- CWE-266Incorrect Privilege Assignment1 CVEs
- CWE-276Incorrect Default Permissions1 CVEs
- CWE-287Improper Authentication1 CVEs
03
sources (1)
Which sources assert this record, and when.
- USNVD / CVE20 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan