BC
Product
BIG-IQ Centralized Management
On CISA KEVExploited in the wildRansomware-linked
84
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 36Medium 38Low 0
Watch
Add BIG-IQ Centralized Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-22986 RansomwareIn wildKEV | 9.8 | Mar 31 | F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability Affected: 6.0.0 before 6.1.0; 7.0.0 before 7.0.0.2; 7.1.0 before 7.1.0.3 |
| CVE-2022-35728 | 9.8 | Aug 4 | iControl REST vulnerability CVE-2022-35728 Affected: 8.0.x before 8.2.0; 7.0.0 before 7.x* |
| CVE-2020-5868 | 9.8 | Apr 24 | In BIG-IQ 6.0.0-7.0.0, a remote access vulnerability has been discovered that may allow a remote user to execute shell commands on affected systems using HTTP requests to the… Affected: 6.0.0 through 6.1.0; 7.0.0 |
| CVE-2016-5022 | 9.8 | Sep 7 | F5 BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.x before 11.2.1 HF16, 11.3.x, 11.4.x, 11.5.x before 11.5.4 HF2, 11.6.x before 11.6.1 HF1, and 12.x before 12.0.0 HF3;… Affected: 4.6.0 |
| CVE-2019-6665 | 9.4 | Nov 27 | On BIG-IP ASM 15.0.0-15.0.1, 14.1.0-14.1.2, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, BIG-IQ 6.0.0 and 5.2.0-5.4.0, iWorkflow 2.3.0, and Enterprise Manager 3.1.1, an attacker with… Affected: 5.2.0 through 5.4.0; 6.0.0 |
| CVE-2021-23005 | 9.1 | Mar 31 | On all 7.x and 6.x versions (fixed in 8.0.0), when using a Quorum device for BIG-IQ high availability (HA) for automatic failover, BIG-IQ does not make use of Transport Layer… Affected: 6.0.0 before 8.0.0 |
| CVE-2020-5869 | 9.1 | Apr 24 | In BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization is not secure by TLS and may allow on-path attackers to read / modify confidential data in transit Affected: 5.2.0 through 5.4.0; 6.0.0 through 6.1.0; 7.0.0 before 7.1.0 |
| CVE-2019-10744 | 9.1 | Jul 26 | Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution Affected: 6.0.0 through 6.1.0; 5.4.0; 7.0.0 |
Showing 8