Skip to content

Vulnerabilities of n/a BIG-IQ

Is your version affected?

CVE Summary Score Published
CVE-2021-23024 On version 8.0.x before 8.0.0.1, and all 6.x and 7.x versions, the BIG-IQ Configuration utility has an authenticated… Not rated Jun 10, 2021
CVE-2021-23006 On all 7.x and 6.x versions (fixed in 8.0.0), undisclosed BIG-IQ pages have a reflected cross-site scripting… Not rated Mar 31, 2021
CVE-2021-23005 On all 7.x and 6.x versions (fixed in 8.0.0), when using a Quorum device for BIG-IQ high availability (HA) for automatic… Not rated Mar 31, 2021
CVE-2021-22997 On all 7.x and 6.x versions (fixed in 8.0.0), BIG-IQ HA ElasticSearch service does not implement any form of… Not rated Mar 31, 2021
CVE-2021-22996 On all 7.x versions (fixed in 8.0.0), when set up for auto failover, a BIG-IQ Data Collection Device (DCD) cluster… Not rated Mar 31, 2021
CVE-2021-22995 On all 7.x and 6.x versions (fixed in 8.0.0), BIG-IQ high availability (HA) when using a Quorum device for automatic… Not rated Mar 31, 2021
CVE-2020-5944 In BIG-IQ 7.1.0, accessing the DoS Summary events and DNS Overview pages in the BIG-IQ system interface returns an error… Not rated Nov 5, 2020
CVE-2020-5890 On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1 and BIG-IQ 5.2.0-7.1.0, when creating a… Not rated Apr 30, 2020
CVE-2020-5873 On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.1-11.6.5 and BIG-IQ 5.2.0-7.1.0, a… Not rated Apr 30, 2020
CVE-2020-5870 In BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization mechanisms do not use any form of authentication for… Not rated Apr 24, 2020
CVE-2020-5869 In BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization is not secure by TLS and may allow on-path attackers to… Not rated Apr 24, 2020
CVE-2020-5868 In BIG-IQ 6.0.0-7.0.0, a remote access vulnerability has been discovered that may allow a remote user to execute shell… Not rated Apr 24, 2020
CVE-2019-6653 There is a Stored Cross Site Scripting vulnerability in the undisclosed page of a BIG-IQ 6.0.0-6.1.0 or 5.2.0-5.4.0… Not rated Sep 25, 2019
CVE-2019-6652 In BIG-IQ 6.0.0-6.1.0, services for stats do not require authentication nor do they implement any form of Transport… Not rated Sep 25, 2019
CVE-2019-6621 On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, 11.6.1-11.6.3.4, and 11.5.2-11.5.8 and… Not rated Jul 2, 2019

Other n/a products