BIG-IQ
15 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2021-23024 | 8.0.x before 8.0.0.1, and all 6.x and 7.x versions | On version 8.0.x before 8.0.0.1, and all 6.x and 7.x versions, the BIG-IQ Configuration utility has an authenticated remote command executio | HIGH 7.2 | 5.3 % | ||
| CVE-2021-23006 | All 7.x and 6.x versions | On all 7.x and 6.x versions (fixed in 8.0.0), undisclosed BIG-IQ pages have a reflected cross-site scripting vulnerability. Note: Software v | MEDIUM 6.1 | 0.6 % | ||
| CVE-2021-23005 | All 7.x and 6.x versions | On all 7.x and 6.x versions (fixed in 8.0.0), when using a Quorum device for BIG-IQ high availability (HA) for automatic failover, BIG-IQ do | CRITICAL 9.1 | 1.0 % | ||
| CVE-2021-22997 | All 7.x and 6.x versions | On all 7.x and 6.x versions (fixed in 8.0.0), BIG-IQ HA ElasticSearch service does not implement any form of authentication for the clusteri | HIGH 7.5 | 1.1 % | ||
| CVE-2021-22996 | All 7.x versons | On all 7.x versions (fixed in 8.0.0), when set up for auto failover, a BIG-IQ Data Collection Device (DCD) cluster member that receives an u | HIGH 7.5 | 1.0 % | ||
| CVE-2021-22995 | All 7.x and 6.x versions | On all 7.x and 6.x versions (fixed in 8.0.0), BIG-IQ high availability (HA) when using a Quorum device for automatic failover does not imple | HIGH 7.5 | 0.9 % | ||
| CVE-2020-5944 | 7.1.0 | In BIG-IQ 7.1.0, accessing the DoS Summary events and DNS Overview pages in the BIG-IQ system interface returns an error message due to disa | MEDIUM 4.3 | 0.8 % | ||
| CVE-2020-5890 | 5.2.0-7.1.0 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1 and BIG-IQ 5.2.0-7.1.0, when creating a QKView, credentials f | MEDIUM 5.5 | 0.5 % | ||
| CVE-2020-5873 | 5.2.0-7.1.0 | On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.1-11.6.5 and BIG-IQ 5.2.0-7.1.0, a user associated with t | HIGH 7.2 | 1.4 % | ||
| CVE-2020-5870 | 5.2.0-7.0.0 | In BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization mechanisms do not use any form of authentication for connecting to the peer. | HIGH 8.1 | 0.5 % | ||
| CVE-2020-5869 | 5.2.0-7.0.0 | In BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization is not secure by TLS and may allow on-path attackers to read / modify confiden | CRITICAL 9.1 | 0.5 % | ||
| CVE-2020-5868 | 6.0.0-7.0.0 | In BIG-IQ 6.0.0-7.0.0, a remote access vulnerability has been discovered that may allow a remote user to execute shell commands on affected | CRITICAL 9.8 | 2.2 % | ||
| CVE-2019-6653 | 6.0.0-6.1.0, 5.2.0-5.4.0 | There is a Stored Cross Site Scripting vulnerability in the undisclosed page of a BIG-IQ 6.0.0-6.1.0 or 5.2.0-5.4.0 system. The attack can b | MEDIUM 5.4 | 0.6 % | ||
| CVE-2019-6652 | 6.0.0-6.1.0 | In BIG-IQ 6.0.0-6.1.0, services for stats do not require authentication nor do they implement any form of Transport Layer Security (TLS). | MEDIUM 6.5 | 0.6 % | ||
| CVE-2019-6621 | 7.0.0-7.1.0.2 ; 6.0.0-6.1.0 ; 5.1.0-5.4.0 | On BIG-IP 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.0.0-13.1.1.4, 12.1.0-12.1.4.1, 11.6.1-11.6.3.4, and 11.5.2-11.5.8 and BIG-IQ 7.0.0-7.1.0.2, 6 | HIGH 7.2 | 2.0 % |