All vulnerabilities

Servers and applications

CVE-2022-27636

On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, BIG-IP Edge Client may log sensitive APM session-related information when VPN is launched on a Windows system. Note: Software versions which…

Severity
Medium 5.5
Published
5 May 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_access_policy_manager
  • Version 16.1.2
  • Version 16.1.1
  • Version 16.1.0
  • Version 15.1.5
All 31 release lines
  • Version 11.6.1
  • Version 11.6.2
  • Version 11.6.3
  • Version 11.6.4
  • Version 11.6.5
  • Version 12.1.0
  • Version 12.1.1
  • Version 12.1.2
  • Version 12.1.3
  • Version 12.1.4
  • Version 12.1.5
  • Version 12.1.6
  • Version 13.1.0
  • Version 13.1.1
  • Version 13.1.2
  • Version 13.1.3
  • Version 13.1.4
  • Version 13.1.5
  • Version 14.1.0
  • Version 14.1.2
  • Version 14.1.3
  • Version 14.1.4
  • Version 15.1.0
  • Version 15.1.1
  • Version 15.1.2
  • Version 15.1.3
  • Version 15.1.4
  • Version 15.1.5
  • Version 16.1.0
  • Version 16.1.1
  • Version 16.1.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-27636
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-27636