CVE-2024-28883: falha de alta gravidade em F5 BIG-IP
BIG-IP APM browser network access VPN client vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.4epss 0.2%
An origin validation vulnerability exists in
BIG-IP APM browser network access VPN client
for Windows, macOS and Linux which may allow an attacker to bypass F5 endpoint inspection.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVEs relacionadas — F5 BIG-IP
No mesmo produto, das mais perigosas para as menos.
CVE-2022-1388CRITICALCVE-2022-1388EPSS 100.0%KEVCVE-2023-46747CRITICALBIG-IP Configuration utility unauthenticated remote code execution vulnerabilityEPSS 96.7%KEVCVE-2026-94127CRITICALBIG-IP APM OAuth vulnerabilityEPSS 26.6%KEVCVE-2023-46748HIGHBIG-IP Configuration utility authenticated SQL injection vulnerabilityEPSS 4.3%KEVCVE-2025-53521CRITICALBigIP APM VulnerabilityEPSS 2.3%KEVCVE-2022-41622HIGHiControl SOAP vulnerabilityEPSS 92.4%