Skip to content

Vulnerabilities of F5 NGINX API Connectivity Manager

Is your version affected?

CVE Summary Score Published
CVE-2024-10318 A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not… 5.4 Medium Nov 6, 2024
CVE-2023-28724 NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify… 7.1 High May 3, 2023
CVE-2023-28656 NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their… 8.1 High May 3, 2023

Other F5 products