Known vulnerabilities in BIG-IQ Centralized Management 7.0.0 - page 2

Version: 7.0.0
Software CPE: cpe:2.3:a:f5_networks:big-iq:*:*:*:*:*:*:*:*
Total vulnerabilities: 67
Public exploits: 13
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting BIG-IQ Centralized Management version 7.0.0 BIG-IQ Centralized Management 7.0.0 is affected by 67 vulnerabilities: 6 high, 30 medium, 31 low Critical High Medium Low

Vulnerabilities (67)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53743 - Command injection
CVE-2021-23024
CWE-77 Low
No
No
8.0.0.1 02.06.2021 SB2021060209
#VU52736 - Reachable Assertion
CVE-2021-25215
CWE-617 Medium
No
No
- 29.04.2021 SB2021042903
SB2021042904
SB2021042928
and 42 more
#VU52734 - Reachable Assertion
CVE-2021-25214
CWE-617 Low
No
No
- 29.04.2021 SB2021042903
SB2021042904
SB2021042928
and 25 more
#VU51420 - Missing Authentication for Critical Function
CVE-2021-22997
CWE-306 Medium
No
No
8.0.0 11.03.2021 SB2021031118
#VU51417 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-23006
CWE-79 Medium
No
No
8.0.0 11.03.2021 SB2021031115
#VU51416 - Improper input validation
CVE-2021-22996
CWE-20 Medium
No
No
8.0.0 11.03.2021 SB2021031114
#VU51396 - Missing Authentication for Critical Function
CVE-2021-22995
CWE-306 High
No
No
8.0.0 11.03.2021 SB2021031105
#VU51392 - Cleartext Transmission of Sensitive Information
CVE-2021-23005
CWE-319 Low
No
No
8.0.0 11.03.2021 SB2021031103
#VU51391 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-22986
CWE-78 High
Public exploit available
Exploited
7.0.0.2, 7.1.0.3 11.03.2021 SB2021031102
#VU50780 - Memory corruption
CVE-2020-8625
CWE-119 High
No
No
- 17.02.2021 SB2021021718
SB2021021908
SB2021022703
and 28 more
#VU50615 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-22974
CWE-362 Medium
No
No
- 11.02.2021 SB2021021111
SB2021021112
#VU50329 - Out-of-bounds read
CVE-2019-25013
CWE-125 Low
No
No
- 04.01.2021 SB2021020413
SB2021020414
SB2021020710
and 36 more
#VU50404 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-27618
CWE-835 Medium
No
No
- 04.01.2021 SB2021020709
SB2021020710
SB2021020711
and 31 more
#VU50362 - Out-of-bounds write
CVE-2020-29573
CWE-787 Medium
No
No
- 06.12.2020 SB2020120610
SB2021020414
SB2021031411
and 16 more
#VU47106 - Out-of-bounds read
CVE-2020-14314
CWE-125 Low
No
No
- 15.09.2020 SB2020092605
SB2020090877
SB2021031201
and 14 more
#VU46199 - Out-of-bounds read
CVE-2020-17507
CWE-125 Medium
No
No
- 12.08.2020 SB2020081278
SB2020081816
SB2020091405
and 17 more
#VU32881 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-20907
CWE-835 Medium
No
No
- 29.07.2020 SB2020071324
SB2020080201
SB2020082408
and 53 more
#VU20497 - Improper Access Control
CVE-2019-15043
CWE-284 Medium
No
No
8.1.0 02.09.2019 SB2019090201
SB2019090203
SB2020042903
and 7 more
#VU19269 - Improper input validation
CVE-2019-1010083
CWE-20 Medium
No
No
- 19.07.2019 SB2019072205
SB2021062302
SB2023042037
and 1 more
#VU18150 - Improper input validation
CVE-2018-1000656
CWE-20 Medium
No
No
- 08.04.2019 SB2019040802
SB2019040213
SB2020060113
and 4 more


Showing elements 21 - 40 out of 67