Approved changes feed: RSS · Atom
cpe:2.3:a:n/a:big-iq:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | N/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78) |
|---|---|
| Product | Big Iq (4983042e-c239-514b-85ed-53c42aa0ae15) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-23024 |
vulnerable | 2026-06-08 05:30:02.213235 |
Details available
On version 8.0.x before 8.0.0.1, and all 6.x and 7.x versions, the BIG-IQ Configuration utility has an authenticated remote command execution vulnerability in undisclosed pages. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2021-06-10T14:35:08.000Z
Updated: 2024-08-03T18:58:26.279Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23006 |
vulnerable | 2026-06-08 05:30:02.140997 |
Details available
On all 7.x and 6.x versions (fixed in 8.0.0), undisclosed BIG-IQ pages have a reflected cross-site scripting vulnerability. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.
Published: 2021-03-31T17:44:38.000Z
Updated: 2024-08-03T18:58:26.280Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23005 |
vulnerable | 2026-06-08 05:30:02.140620 |
Details available
On all 7.x and 6.x versions (fixed in 8.0.0), when using a Quorum device for BIG-IQ high availability (HA) for automatic failover, BIG-IQ does not make use of Transport Layer Security (TLS) with the Corosync protocol. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.
Published: 2021-03-31T17:41:35.000Z
Updated: 2024-08-03T18:58:26.261Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22997 |
vulnerable | 2026-06-08 05:30:02.114065 |
Details available
On all 7.x and 6.x versions (fixed in 8.0.0), BIG-IQ HA ElasticSearch service does not implement any form of authentication for the clustering transport services, and all data used by ElasticSearch for transport is unencrypted. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.
Published: 2021-03-31T17:35:54.000Z
Updated: 2024-08-03T18:58:26.127Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22996 |
vulnerable | 2026-06-08 05:30:02.113634 |
Details available
On all 7.x versions (fixed in 8.0.0), when set up for auto failover, a BIG-IQ Data Collection Device (DCD) cluster member that receives an undisclosed message may cause the corosync process to abort. This behavior may lead to a denial-of-service (DoS) and impact the stability of a BIG-IQ high availability (HA) cluster. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.
Published: 2021-03-31T17:34:21.000Z
Updated: 2024-08-03T18:58:26.169Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22995 |
vulnerable | 2026-06-08 05:30:02.113242 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5944 |
vulnerable | 2026-06-08 05:26:44.290271 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5890 |
vulnerable | 2026-06-08 05:26:44.118931 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5873 |
vulnerable | 2026-06-08 05:26:44.083025 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5870 |
vulnerable | 2026-06-08 05:26:44.079799 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5869 |
vulnerable | 2026-06-08 05:26:44.079476 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5868 |
vulnerable | 2026-06-08 05:26:44.079040 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6653 |
vulnerable | 2026-06-08 05:14:12.705749 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6652 |
vulnerable | 2026-06-08 05:14:12.705309 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6621 |
vulnerable | 2026-06-08 05:14:12.593364 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.