Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: F5 NGINX API Connectivity Manager, NGINX Instance Manager, NGINX Security Monitoring 1.3.0, 1.5.0, 2.9.0 Clear all filters
TI-2023-13238 CVE-2023-28724 · GHSA-9mcp-v29j-j4hp

NGINX Management Suite vulnerability

Priority LOW 30

NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify sensitive files on NGINX Instance Manager and NGINX API Connectivity Manager.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00171 Published 2023-05-03 Fixed in 2.9.0, 1.5.0 +1 CWE-276
TI-2023-13174 CVE-2023-28656 · GHSA-gjg3-3x79-mxh4

NGINX Management Suite vulnerability

Priority LOW 38

NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assigned environment.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00528 Published 2023-05-03 Fixed in 2.9.0, 1.5.0 +1 CWE-639