Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: F5 BIG-IP Next Central Manager 20.2.0 Clear all filters
TI-2024-17123 CVE-2024-26026 · GHSA-fj43-9cjj-qw2v

BIG-IP Central Manager SQL Injection

Priority MEDIUM 49

An SQL injection vulnerability exists in the BIG-IP Next Central Manager API (URI).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.07163 Published 2024-05-08 Fixed in 20.2.0 CWE-89
TI-2024-14474 CVE-2024-21793 · GHSA-w9q2-p57h-r357

BIG-IP Central Manager OData Injection Vulnerability

Priority MEDIUM 49

An OData injection vulnerability exists in the BIG-IP Next Central Manager API (URI).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.07086 Published 2024-05-08 Fixed in 20.2.0 CWE-89
TI-2024-22198 CVE-2024-33612 · GHSA-4wj3-7p36-wmrw

BIG-IP Next Central Manager vulnerability

Priority LOW 32

An improper certificate validation vulnerability exists in BIG-IP Next Central Manager and may allow an attacker to impersonate an Instance Provider system.

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.00233 Published 2024-05-08 Fixed in 20.2.0 CWE-295