Known vulnerabilities in BIG-IQ Centralized Management 7.0.0 - page 3

Vendor: F5 Networks

Software: BIG-IQ Centralized Management

Version: 7.0.0

Software CPE: cpe:2.3:a:f5_networks:big-iq:*:*:*:*:*:*:*:*

Website: https://f5.com/

Total vulnerabilities: 67

Public exploits: 13

Known exploited (KEV): 2

Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Vulnerabilities (67)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU48896 - NULL Pointer Dereference CVE-2020-1971	CWE-476	Medium	Public exploit available	No	-	08.12.2020	SB2020120852 SB2020120903 SB2020120905 and 91 more
#VU49150 - Use of Insufficiently Random Values CVE-2020-25705	CWE-330	Medium	Public exploit available	No	-	17.11.2020	SB2020111734 SB2020122413 SB2021031802 and 24 more
#VU46077 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-5917	CWE-300	Medium	No	No	-	26.08.2020	SB2020082611
#VU27395 - Authentication Bypass by Spoofing CVE-2020-11868	CWE-290	Low	No	No	-	28.04.2020	SB2020042822 SB2020070701 SB2020071906 and 7 more
#VU34424 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-5868	CWE-78	High	No	No	-	24.04.2020	SB2020042430
#VU27305 - Improper Authentication CVE-2020-5870	CWE-287	Low	No	No	7.1.0	24.04.2020	SB2020042408
#VU27304 - Improper Certificate Validation CVE-2020-5869	CWE-295	Medium	No	No	7.1.0	24.04.2020	SB2020042408
#VU26320 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-10241	CWE-79	Low	No	No	7.1.0	23.03.2020	SB2020032710 SB2020072802 SB2020121701 and 14 more
#VU21059 - Heap-based Buffer Overflow CVE-2019-5482	CWE-122	Medium	No	No	-	11.09.2019	SB2019091142 SB2019091143 SB2019091201 and 28 more
#VU18254 - Out-of-bounds write CVE-2019-3863	CWE-787	Medium	No	No	-	15.04.2019	SB2019031904 SB2019041501 SB2019032002 and 20 more
#VU18025 - Integer overflow CVE-2019-3857	CWE-190	Medium	No	No	-	19.03.2019	SB2019031904 SB2019041501 SB2019032002 and 20 more
#VU18023 - Integer overflow CVE-2019-3856	CWE-190	Medium	No	No	-	19.03.2019	SB2019031904 SB2019041501 SB2019032002 and 20 more
#VU16558 - Permissions, Privileges, and Access Controls CVE-2018-18397	CWE-264	Low	Public exploit available	No	-	14.12.2018	SB2018120502 SB2019030501 SB2019042310 and 5 more
#VU14184 - Out-of-bounds read CVE-2017-18344	CWE-125	Low	Public exploit available	No	-	02.08.2018	SB2017122701 SB2018080803 SB2018111335 and 7 more
#VU13023 - Use After Free CVE-2018-10675	CWE-416	Low	No	No	-	28.05.2018	SB2017082507 SB2018111335 SB2018111336 and 11 more
#VU12992 - Buffer overflow CVE-2018-1126	CWE-120	High	Public exploit available	No	-	23.05.2018	SB2018052212 SB2018052312 SB2018052315 and 20 more
#VU12977 - Integer overflow CVE-2018-1124	CWE-190	Low	Public exploit available	No	-	22.05.2018	SB2018052212 SB2018052312 SB2018052315 and 23 more
#VU12975 - Permissions, Privileges, and Access Controls CVE-2018-1122	CWE-264	Low	Public exploit available	No	-	22.05.2018	SB2018052212 SB2018052312 SB2018052315 and 17 more
#VU12853 - Improper input validation CVE-2018-1120	CWE-20	Low	Public exploit available	No	-	20.05.2018	SB2018052205 SB2018052212 SB2018053102 and 12 more
#VU9693 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2017-10661	CWE-362	Low	Public exploit available	No	-	19.12.2017	SB2017121510 SB2017103108 SB2017121511 and 35 more

Showing elements 41 - 60 out of 67

Known vulnerabilities in BIG-IQ Centralized Management 7.0.0 - page 3

Vulnerabilities by Severity

Vulnerabilities (67)

Please verify you're human