Approved changes feed: RSS · Atom

cpe:2.3:a:f5:big-iq_centralized_management:7.0.0:*:*:*:*:*:*:*

part: a version: 7.0.0 update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductBig Iq Centralized Management (a35a1e16-a26d-5e18-9fae-1b28f0f6fc73)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-35728 vulnerable 2026-06-08 05:46:05.211160 iControl REST vulnerability CVE-2022-35728
HIGH (8.1)
In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ version 8.x before 8.2.0 and all versions of 7.x, an authenticated user's iControl REST token may remain valid for a limited time after logging out from the Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2022-08-04T17:49:50.388Z
Updated: 2024-09-16T16:42:29.606Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34844 vulnerable 2026-06-08 05:46:03.684507 BIG-IP and BIG-IQ AWS vulnerability CVE-2022-34844
MEDIUM (5.9)
In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, and all versions of BIG-IQ 8.x, when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) driver is used with BIG-IP or BIG-IQ on Amazon Web Services (AWS) systems, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Successful exploitation relies on conditions outside of the attacker's control. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2022-08-04T17:47:44.666Z
Updated: 2024-09-16T20:58:07.964Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29479 vulnerable 2026-06-08 05:42:47.999375 Details available
MEDIUM (5.3)
On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Management all versions of 8.x and 7.x, when an IPv6 self IP address is configured and the ipv6.strictcompliance database key is enabled (disabled by default) on a BIG-IP system, undisclosed packets may cause decreased performance. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:45:58.183Z
Updated: 2024-09-17T01:01:23.864Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5923 vulnerable 2026-06-08 05:26:44.193631 Details available
In BIG-IP versions 15.0.0-15.1.0.4, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1 and BIG-IQ versions 5.4.0-7.0.0, Self-IP port-lockdown bypass via IPv6 link-local addresses.
Published: 2020-08-26T14:41:43.000Z
Updated: 2024-08-04T08:47:41.008Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5917 vulnerable 2026-06-08 05:26:44.171858 Details available
In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2 and BIG-IQ versions 5.2.0-7.0.0, the host OpenSSH servers utilize keys of less than 2048 bits which are no longer considered secure.
Published: 2020-08-26T14:06:50.000Z
Updated: 2024-08-04T08:47:40.928Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5890 vulnerable 2026-06-08 05:26:44.118974 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5868 vulnerable 2026-06-08 05:26:44.079117 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5860 vulnerable 2026-06-08 05:26:44.061714 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5858 vulnerable 2026-06-08 05:26:44.058843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-5854 vulnerable 2026-06-08 05:26:44.045826 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6663 vulnerable 2026-06-08 05:14:12.724876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-6651 vulnerable 2026-06-08 05:14:12.704759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-19151 vulnerable 2026-06-08 05:13:21.561969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10744 vulnerable 2026-06-08 05:12:25.200616 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14880 vulnerable 2026-06-08 05:10:53.629098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14468 vulnerable 2026-06-08 05:10:52.957631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-12207 vulnerable 2026-06-08 05:10:41.184992 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.