Known vulnerabilities in BIG-IQ 8.2.0

Software: BIG-IQ
Version: 8.2.0
Software CPE: cpe:2.3:a:f5_networks:big-iq:*:*:*:*:*:*:*:*
Total vulnerabilities: 51
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BIG-IQ version 8.2.0 BIG-IQ 8.2.0 is affected by 51 vulnerabilities: 2 high, 18 medium, 31 low Critical High Medium Low

Vulnerabilities (51)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98759 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47139
CWE-79 Low
No
No
8.2.0.1, 8.3.0 16.10.2024 SB20241016110
#VU96745 - Incorrect Regular Expression
CVE-2024-6232
CWE-185 Medium
No
No
- 03.09.2024 SB2024090377
SB2024090927
SB2024091048
and 145 more
#VU89895 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-52881
CWE-451 Medium
No
No
- 29.05.2024 SB2024052952
SB2024070462
SB2024070904
and 69 more
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51385
CWE-78 Medium
Public exploit available
No
- 26.12.2023 SB2023121905
SB2023122710
SB2023122801
and 65 more
#VU83900 - Exposure of sensitive information to an unauthorized actor
CVE-2023-46218
CWE-200 Low
No
No
- 06.12.2023 SB2023120612
SB2023120644
SB2023120661
and 87 more
#VU82894 - Resource Management Errors
CVE-2023-5678
CWE-399 Medium
No
No
- 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more
#VU82299 - Heap-based Buffer Overflow
CVE-2023-45853
CWE-122 Medium
No
No
- 23.10.2023 SB2023102325
SB2023102633
SB2023102634
and 40 more
#VU80523 - Out-of-bounds write
CVE-2020-22218
CWE-787 Medium
No
No
- 07.09.2023 SB2023090729
SB2023090732
SB2023090843
and 21 more
#VU78798 - Resource Management Errors
CVE-2023-3817
CWE-399 Low
No
No
- 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU64396 - Observable discrepancy
CVE-2022-23823
CWE-203 Medium
No
No
- 15.06.2022 SB2022061516
SB20250227198
SB20250227199
and 1 more
#VU64378 - Observable discrepancy
CVE-2022-24436
CWE-203 Medium
No
No
- 14.06.2022 SB2022061501
SB20250227202
SB20250227203
and 1 more
#VU61246 - Use After Free
CVE-2021-4083
CWE-416 Low
No
No
- 10.03.2022 SB2022031029
SB2022031033
SB2022031034
and 55 more
#VU18253 - Out-of-bounds read
CVE-2019-3862
CWE-125 Medium
No
No
- 15.04.2019 SB2019031904
SB2019041501
SB2019032002
and 16 more
#VU18028 - Out-of-bounds read
CVE-2019-3858
CWE-125 Medium
No
No
- 20.03.2019 SB2019031904
SB2019041501
SB2019032002
and 12 more
#VU15953 - Out-of-bounds read
CVE-2016-10350
CWE-125 Low
No
No
- 19.11.2018 SB2017091705
SB2018111908
SB2018122801
and 5 more
#VU15951 - Out-of-bounds read
CVE-2016-10349
CWE-125 Low
No
No
- 19.11.2018 SB2017091705
SB2018111908
SB2018122801
and 5 more
#VU15950 - NULL Pointer Dereference
CVE-2016-10209
CWE-476 Low
No
No
- 19.11.2018 SB2017091705
SB2018111908
SB2018122801
and 4 more
#VU11835 - Heap-based Buffer Overflow
CVE-2018-6913
CWE-122 Low
No
No
- 16.04.2018 SB2018041601
SB2019090611
SB2018041717
and 15 more
#VU6663 - Out-of-bounds read
CVE-2016-9840
CWE-125 Low
No
No
- 24.05.2017 SB2017052312
SB2017052405
SB2017052406
and 47 more
#VU6664 - Out-of-bounds read
CVE-2016-9841
CWE-125 Low
No
No
- 24.05.2017 SB2017052312
SB2017052405
SB2017052406
and 34 more


Showing elements 1 - 20 out of 51