Skip to contentF5 Nginx vulnerabilities
- f5 nginx openid connect, nginx api connectivity manager, nginx ingress controller +1 more +3 moreNGINX OpenID Connect VulnerabilityCVE-2024-103185.1 Medium
- f5 nginx agent, nginx instance manager +1 moreNGINX Agent VulnerabilityCVE-2024-7634Fix available6.9 Medium
- f5 nginx open source, nginx plus +1 moreNGINX MP4 module vulnerabilityCVE-2024-7347Fix available5.7 Medium
- f5 nginx plusNGINX Plus MQTT vulnerabilityCVE-2024-397928.7 High
- f5 nginx, nginx plus, nginx open source +1 more +3 moreNGINX HTTP/3 QUIC vulnerabilityCVE-2024-35200Fix available5.3 Medium
- f5 nginx, nginx plus, nginx open source +1 more +3 moreNGINX HTTP/3 QUIC vulnerabilityCVE-2024-34161Fix available5.3 Medium
- f5 nginx, nginx plus, nginx open source +1 more +3 moreNGINX HTTP/3 QUIC vulnerabilityCVE-2024-32760Fix available6.5 Medium
- f5 nginx, nginx plus, nginx open source +1 more +3 moreNGINX HTTP/3 QUIC vulnerabilityCVE-2024-31079Fix available4.8 Medium
- f5 nginx plus, nginx open source +1 moreNGINX HTTP/3 QUIC vulnerabilityCVE-2024-24990Fix available7.5 High
- f5 nginx plus, nginx open source +1 moreNGINX HTTP/3 QUIC vulnerabilityCVE-2024-24989Fix available7.5 High
- eclipse jetty, ietf http, http/2 +166 more +168 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2023-44487In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- f5 nginx api connectivity manager, nginx instance manager, nginx security monitoring +2 moreNGINX Management Suite vulnerabilityCVE-2023-287247.1 High
- f5 nginx api connectivity manager, nginx instance manager, nginx security monitoring +2 more +4 moreNGINX Management Suite vulnerabilityCVE-2023-286568.1 High
- f5 nginx agent, nginx instance manager +1 moreNGINX Agent vulnerability CVE-2023-1550CVE-2023-1550Fix available5.5 Medium
- f5 nginx plus, nginx ingress controller +1 moreNGINX ngx_http_hls_module vulnerability CVE-2022-41743CVE-2022-41743Fix available7.0 High
- f5 nginx, nginx open source subscription, nginx plus +3 more +5 moreNGINX ngx_http_mp4_module vulnerability CVE-2022-41742CVE-2022-41742Fix available7.1 High
- f5 nginx, nginx open source subscription, nginx plus +3 more +5 moreNGINX ngx_http_mp4_module vulnerability CVE-2022-41741CVE-2022-41741Public exploitFix available7.0 High
- f5 nginx instance managerNGINX Instance Manager vulnerability CVE-2022-35241CVE-2022-352416.5 Medium
- f5 nginx ingress controllerNGINX Ingress Controller vulnerability CVE-2022-30535CVE-2022-30535Fix available6.5 Medium
- f5 nginx service meshOn all versions 1.3.x (fixed in 1.4.0) NGINX Service Mesh control plane endpoints are exposed to...CVE-2022-274956.5 Medium
- f5 nginx ingress controllerOn version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls...CVE-2021-23055Fix available6.5 Medium
- f5 nginx controller api managementOn NGINX Controller API Management versions 3.18.0-3.19.0, an authenticated attacker with access...CVE-2022-230085.4 Medium
- debian linux, f5 nginx, fedoraproject fedora +2 more +4 moreALPACA is an application layer protocol content confusion attack, exploiting TLS servers...CVE-2021-3618Fix available7.4 High
- owasp modsecurity, debian linux, f5 nginx modsecurity waf +2 more +4 moreModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects...CVE-2021-42717Public exploitFix available7.5 High
- f5 nginx app protect, big-ip advanced web application firewall, big-ip application security manager +2 moreOn BIG-IP Advanced WAF and BIG-IP ASM version 16.0.x before 16.0.1.2 and 15.1.x before 15.1.3 and...CVE-2021-230507.5 High
- f5 nginx, debian linux +1 moreNGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a...CVE-2017-20005Fix available9.8 Critical
- f5 nginx controllerThe Nginx Controller 3.x before 3.7.0 agent configuration file /etc/controller-agent/agent.conf...CVE-2021-230215.5 Medium
- f5 nginx controllerThe NAAS 3.x before 3.10.0 API keys were generated using an insecure pseudo-random string and...CVE-2021-230205.5 Medium
- f5 nginx controllerThe NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed...CVE-2021-230197.8 High
- f5 nginx controllerIntra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before...CVE-2021-230187.4 High
- f5 nginx, fedoraproject fedora, netapp ontap select deploy administration utility +10 more +12 moreA security issue in nginx resolver was identified, which might allow an attacker who is able to...CVE-2021-23017Public exploitFix availableEPSS 53.5%7.7 High
- f5 nginx controller, netapp cloud backup +1 moreIn versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute...CVE-2020-277309.8 Critical
- f5 nginx controllerIn versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, when users run the command displayed in NGINX...CVE-2020-59095.4 Medium
- f5 nginx controllerIn versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the Neural Autonomic Transport System (NATS)...CVE-2020-59107.5 High
- f5 nginx controllerIn versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller installer starts the...CVE-2020-59117.3 High
- f5 nginx controllerIn NGINX Controller 3.3.0-3.4.0, undisclosed API endpoints may allow for a reflected Cross Site...CVE-2020-59019.6 Critical
- f5 nginx controllerIn NGINX Controller 3.0.0-3.4.0, recovery code required to change a user's password is...CVE-2020-58997.8 High
- f5 nginx controllerIn versions 3.0.0-3.4.0, 2.0.0-2.9.0, and 1.0.1, there is insufficient cross-site request forgery...CVE-2020-59008.8 High
- f5 nginx controllerOn NGINX Controller versions 3.1.0-3.3.0, AVRD uses world-readable and world-writable permissions...CVE-2020-58957.8 High
- f5 nginx controllerOn versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side...CVE-2020-58948.1 High
- f5 nginx controller, netapp cloud backup +1 moreIn versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP...CVE-2020-58678.1 High
- f5 nginx controllerIn versions of NGINX Controller prior to 3.3.0, the helper.sh script, which is used optionally in...CVE-2020-58665.5 Medium
- f5 nginx controllerIn versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX...CVE-2020-58647.4 High
- f5 nginx controller, netapp cloud backup +1 moreIn versions prior to 3.3.0, the NGINX Controller is configured to communicate with its Postgres...CVE-2020-58654.8 Medium
- f5 nginx controller, netapp cloud backup +1 moreIn NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to...CVE-2020-58638.6 High
- f5 nginx, apple xcode, canonical ubuntu linux +2 more +4 moreNGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as...CVE-2019-20372Public exploitFix availableEPSS 15.0%5.3 Medium
- f5 nginx, debian linux +1 morenginx http proxy module does not verify peer identity of https origin server which could...CVE-2011-4968Fix available4.8 Medium
- apache traffic server, apple swiftnio, canonical ubuntu linux +16 more +18 moreSome HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of serviceCVE-2019-9516Fix availableEPSS 57.5%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of serviceCVE-2019-9513Public exploitFix availableEPSS 81.6%7.5 High
- apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 moreSome HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of serviceCVE-2019-9511Public exploitFix availableEPSS 59.5%7.5 High
- Show moreLoading…