All vulnerabilities

Servers and applications

CVE-2021-22980

In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1.8.5, an untrusted search path vulnerability in the BIG-IP APM Client Troubleshooting Utility (CTU) for Windows could allow an attacker to load a malicious DLL library from its current directory. User interaction is required to exploit this vulnerability in that the victim must run this utility on…

Severity
High 7.8
Published
12 Feb 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
13.1.3.6, 16.0.1.1
Sources
NVD

Affected software

SoftwareAffected versions
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_access_policy_manager
  • From 11.6.1 up to 11.6.5
  • From 12.1.0 up to 12.1.5
  • From 13.1.0 before 13.1.3.6
  • From 14.1.0 up to 14.1.3
  • From 15.1.0 up to 15.1.2
  • From 16.0.0 before 16.0.1.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-22980
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-22980