Known vulnerabilities in NGINX Instance Manager
Vendor:
F5 Networks
Software:
NGINX Instance Manager
Software CPE:
cpe:2.3:a:f5_networks:nginx_instance_manager:*:*:*:*:*:*:*:*
Website:
https://f5.com/
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.6
Breakdown by Severity Chart
2.22.0
2.21.1
2.21.0
2.20.1
2.20.0
2.19.3
2.19.2
2.19.1
2.19.0
2.18.1
2.18.0
2.17.4
2.17.3
2.17.2
2.17.1
2.17.0
2.16.0
2.15.1
2.15.0
2.14.1
2.14.0
2.13.1
2.13.0
2.12.0
2.11.0
2.10.1
2.10.0
2.9.1
2.9.0
2.8.0
2.7.0
2.6.0
2.5.1
2.5.0
2.4.0
note: when f5 designates the eos for a product
1.0.0
1.0.1
1.0.2
1.0.3
1.0.4
2.0.0
2.0.1
2.1.0
2.2.0
2.3.0
2.3.1
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU122335 - Acceptance of Extraneous Untrusted Data With Trusted Data CVE-2026-1642 |
CWE-349 | Medium | - | 05.02.2026 |
SB2026020501 SB2026020505 SB2026020511 and 22 more |
||
| #VU100049 - Session Fixation CVE-2024-10318 |
CWE-384 | Low | 2.17.4 | 07.11.2024 |
SB2024110735 |
||
| #VU66175 - Resource exhaustion CVE-2022-35241 |
CWE-400 | Medium | 2.3.1 | 08.08.2022 |
SB2022080813 |