F5 Access vulnerabilities

3 known vulnerabilities in F5 Access from F5. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  F5 Access: Improper Certificate Validation

  CVE-2025-54809Aug 13, 2025F5

  F5 Access for Android before version 3.1.2 which uses HTTPS does not verify the remote endpoint identity. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

• 8.2 High severity

  BIG-IP Edge Client: Cleartext Transmission of Sensitive Information

  CVE-2023-43125Sep 27, 2023F5

  BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

• 7.1 High severity

  BIG-IP Edge Client: Cleartext Transmission of Sensitive Information

  CVE-2023-43124Sep 27, 2023F5

  BIG-IP APM clients may send IP traffic outside of the VPN tunnel. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated