Advisories · Technology

F5 BIG-IQ Centralized Management.

Every CVE that names F5 BIG-IQ Centralized Management among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-22326 CVE record

CVSS 4.9 Medium

iControl REST and tmsh vulnerability
- F5 BIG-IP
- F5 BIG-IQ Centralized Management
- Broken access control
Not analysed yet 1 Feb 2023
CVE-2022-41622 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

iControl SOAP vulnerability
- F5 BIG-IP
- F5 BIG-IQ Centralized Management
- Cross-site request forgery (CSRF)
Not analysed yet 7 Dec 2022
CVE-2022-35728 CVE record

CVSS 8.1 High

iControl REST vulnerability CVE-2022-35728
- F5 BIG-IP
- F5 BIG-IQ Centralized Management
- Authentication bypass
Not analysed yet 4 Aug 2022
CVE-2022-34851 CVE record

CVSS 4.3 Medium

BIG-IP and BIG-IQ iControl SOAP vulnerability CVE-2022-34851
- F5 BIG-IP
- F5 BIG-IQ Centralized Management
- CWE-20
Not analysed yet 4 Aug 2022
CVE-2022-34844 CVE record

CVSS 5.9 Medium

BIG-IP and BIG-IQ AWS vulnerability CVE-2022-34844
- F5 BIG-IP
- F5 BIG-IQ Centralized Management
- CWE-20
Not analysed yet 4 Aug 2022
CVE-2022-29479 CVE record

CVSS 5.3 Medium

Improper input validation in F5 BIG-IP and others
- F5 BIG-IP
- F5 BIG-IQ Centralized Management
- CWE-20
Not analysed yet 5 May 2022
CVE-2022-26340 CVE record

CVSS 4.9 Medium

Incorrect permission assignment in F5 BIG-IP and others
- F5 BIG-IP
- F5 BIG-IQ Centralized Management
- Broken access control
Not analysed yet 5 May 2022