Vulnerabilities of F5 NGINX Plus
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-23419 | When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption… | 4.3 Medium | Feb 5, 2025 |
| CVE-2024-7347 | NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module, which might allow an attacker to… | 4.7 Medium | Aug 14, 2024 |
| CVE-2024-39792 | When the NGINX Plus is configured to use the MQTT pre-read module, undisclosed requests can cause an increase in… | 7.5 High | Aug 14, 2024 |
| CVE-2024-35200 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX… | 5.3 Medium | May 29, 2024 |
| CVE-2024-34161 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module and the network infrastructure supports a… | 5.3 Medium | May 29, 2024 |
| CVE-2024-32760 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 encoder instructions can… | 6.5 Medium | May 29, 2024 |
| CVE-2024-31079 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 requests can cause NGINX… | 4.8 Medium | May 29, 2024 |
| CVE-2024-24990 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker… | 7.5 High | Feb 14, 2024 |
| CVE-2024-24989 | When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed requests can cause NGINX worker… | 7.5 High | Feb 14, 2024 |
| CVE-2022-41743 | NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_hls_module that might allow a… | 7.0 High | Oct 19, 2022 |
| CVE-2022-41742 | NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and… | 7.1 High | Oct 19, 2022 |
| CVE-2022-41741 | NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and… | 7.0 High | Oct 19, 2022 |
Other F5 products
BIG-IP 259
NGINX Open Source 35
BIG-IP Next CNF 26
BIG-IP Next SPK 23
BIG-IQ 20
BIG-IP Next for Kubernetes 13
F5OS - Appliance 12
BIG-IP APM 12
BIG-IP Edge Client 11
F5OS - Chassis 10
BIG-IP Next Central Manager 9
BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccelerator) 8