F5 BIG-IQ Centralized Management 7.1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:f5:big-iq_centralized_management:7.1.0:*:*:*:*:*:*:*
part: a version: 7.1.0 update: *
| Vendor | F5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5) |
|---|---|
| Product | Big Iq Centralized Management (a35a1e16-a26d-5e18-9fae-1b28f0f6fc73) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-41770 |
vulnerable | 2026-06-08 05:48:30.941417 |
BIG-IP and BIG-IQ iControl REST vulnerability CVE-2022-41770
MEDIUM (6.5)
In BIG-IP versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.7, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ all versions of 8.x and 7.x, an authenticated iControl REST user can cause an increase in memory resource utilization, via undisclosed requests.
Published: 2022-10-19T21:21:48.456Z
Updated: 2025-05-08T18:08:48.308Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41622 |
vulnerable | 2026-06-08 05:48:30.630548 |
iControl SOAP vulnerability
HIGH (8.8)
In all versions,
BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2022-12-07T03:08:06.811Z
Updated: 2025-04-23T13:36:49.162Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35728 |
vulnerable | 2026-06-08 05:46:05.211180 |
iControl REST vulnerability CVE-2022-35728
HIGH (8.1)
In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.1.3.1, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5.1, and all versions of 13.1.x, and BIG-IQ version 8.x before 8.2.0 and all versions of 7.x, an authenticated user's iControl REST token may remain valid for a limited time after logging out from the Configuration utility. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2022-08-04T17:49:50.388Z
Updated: 2024-09-16T16:42:29.606Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34844 |
vulnerable | 2026-06-08 05:46:03.685594 |
BIG-IP and BIG-IQ AWS vulnerability CVE-2022-34844
MEDIUM (5.9)
In BIG-IP Versions 16.1.x before 16.1.3.1 and 15.1.x before 15.1.6.1, and all versions of BIG-IQ 8.x, when the Data Plane Development Kit (DPDK)/Elastic Network Adapter (ENA) driver is used with BIG-IP or BIG-IQ on Amazon Web Services (AWS) systems, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Successful exploitation relies on conditions outside of the attacker's control. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2022-08-04T17:47:44.666Z
Updated: 2024-09-16T20:58:07.964Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-29479 |
vulnerable | 2026-06-08 05:42:48.000499 |
Details available
MEDIUM (5.3)
On F5 BIG-IP 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, and F5 BIG-IQ Centralized Management all versions of 8.x and 7.x, when an IPv6 self IP address is configured and the ipv6.strictcompliance database key is enabled (disabled by default) on a BIG-IP system, undisclosed packets may cause decreased performance. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2022-05-05T16:45:58.183Z
Updated: 2024-09-17T01:01:23.864Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-20001 |
vulnerable | 2026-06-08 04:47:18.800077 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.