Known vulnerabilities in NGINX Instance Manager
Vendor:
F5 Networks
Software:
NGINX Instance Manager
Software CPE:
cpe:2.3:a:f5_networks:nginx_instance_manager:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.6
Breakdown by Severity Chart
2.22.0
2.21.1
2.21.0
2.20.1
2.20.0
2.19.3
2.19.2
2.19.1
2.19.0
2.18.1
2.18.0
2.17.4
2.17.3
2.17.2
2.17.1
2.17.0
2.16.0
2.15.1
2.15.0
2.14.1
2.14.0
2.13.1
2.13.0
2.12.0
2.11.0
2.10.1
2.10.0
2.9.1
2.9.0
2.8.0
2.7.0
2.6.0
2.5.1
2.5.0
2.4.0
note: when f5 designates the eos for a product
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
2.0.0
2.0.1
2.1.0
2.2.0
2.3.0
2.3.1
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU122335 - Acceptance of Extraneous Untrusted Data With Trusted Data CVE-2026-1642 |
CWE-349 | Medium | - | 05.02.2026 | - | ||
| #VU100049 - Session Fixation CVE-2024-10318 |
CWE-384 | Low | 2.17.4 | 07.11.2024 |
SB2024110735 |
||
| #VU66175 - Resource exhaustion CVE-2022-35241 |
CWE-400 | Medium | 2.3.1 | 08.08.2022 |
SB2022080813 |