7.2.4

DATE	CVE	VULNERABILITY TITLE	RISK
2023-08-02	CVE-2023-36858	Insufficient Verification of Data Authenticity vulnerability in F5 products An insufficient verification of data vulnerability exists in BIG-IP Edge Client for Windows and macOS that may allow an attacker to modify its configured server list. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. local low complexity f5 CWE-345	5.5
2023-08-02	CVE-2023-38418	Improper Verification of Cryptographic Signature vulnerability in F5 Big-Ip Access Policy Manager The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. local low complexity f5 CWE-347	7.8