Known vulnerabilities in BIG-IQ - page 2

Vendor: F5 Networks
Software: BIG-IQ
Software CPE: cpe:2.3:a:f5_networks:big-iq:*:*:*:*:*:*:*:*
Website: https://f5.com/
Total vulnerabilities: 126
Public exploits: 18
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting BIG-IQ BIG-IQ is affected by 126 known vulnerabilities: 9 high, 52 medium, 65 low Critical High Medium Low

Vulnerabilities (126)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98759 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47139		 CWE-79 Low
No
No
 8.2.0.1, 8.3.0 16.10.2024 SB20241016110
#VU96745 - Incorrect Regular Expression
CVE-2024-6232		 CWE-185 Medium
No
No
 - 03.09.2024 SB2024090377
SB2024090927
SB2024091048
and 145 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 - 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 197 more
#VU89895 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-52881		 CWE-451 Medium
No
No
 - 29.05.2024 SB2024052952
SB2024070462
SB2024070904
and 69 more
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51385		 CWE-78 Medium
Available
No
 - 26.12.2023 SB2023121905
SB2023122710
SB2023122801
and 65 more
#VU82544 - Authentication Bypass Using an Alternate Path or Channel
CVE-2023-46747		 CWE-288 High
Available
Exploited
 cvssv3 score 27.10.2023 SB2023102726
SB2024080142
#VU78885 - Improper input validation
CVE-2023-38419		 CWE-20 Medium
No
No
 - 02.08.2023 SB2023080285
#VU61393 - UNIX Symbolic Link (Symlink) Following
CVE-2021-23177		 CWE-61 Low
No
No
 - 15.03.2022 SB2022031530
SB2022031601
SB2022032445
and 25 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720		 CWE-444 Medium
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU50404 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-27618		 CWE-835 Medium
No
No
 - 04.01.2021 SB2021020709
SB2021020710
SB2021020711
and 31 more
#VU48942 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-27216		 CWE-362 Low
No
No
 - 23.10.2020 SB2020121307
SB2020121308
SB2021012011
and 27 more
#VU27230 - Improper input validation
CVE-2020-2756		 CWE-20 Low
No
No
 - 23.04.2020 SB2020042301
SB2020042302
SB2020042316
and 51 more
#VU27231 - Improper input validation
CVE-2020-2757		 CWE-20 Low
No
No
 - 23.04.2020 SB2020042301
SB2020042302
SB2020042316
and 50 more
#VU25333 - Improper Authorization
CVE-2020-1720		 CWE-285 Low
No
No
 - 13.02.2020 SB2020021329
SB2020021411
SB2020021412
and 21 more
#VU16727 - Use After Free
CVE-2018-1000878		 CWE-416 Low
No
No
 - 27.12.2018 SB2018122014
SB2018122801
SB2019041207
and 14 more
#VU16726 - Double Free
CVE-2018-1000877		 CWE-415 Low
No
No
 - 20.12.2018 SB2018122014
SB2018122801
SB2019041207
and 14 more
#VU15953 - Out-of-bounds read
CVE-2016-10350		 CWE-125 Low
No
No
 - 19.11.2018 SB2017091705
SB2018111908
SB2018122801
and 6 more
#VU15951 - Out-of-bounds read
CVE-2016-10349		 CWE-125 Low
No
No
 - 19.11.2018 SB2017091705
SB2018111908
SB2018122801
and 6 more
#VU15950 - NULL Pointer Dereference
CVE-2016-10209		 CWE-476 Low
No
No
 - 19.11.2018 SB2017091705
SB2018111908
SB2018122801
and 5 more
#VU11835 - Heap-based Buffer Overflow
CVE-2018-6913		 CWE-122 Low
No
No
 - 16.04.2018 SB2018041601
SB2019090611
SB2018041717
and 16 more


Showing elements 21 - 40 out of 126