BIG-IP Next Central Manager vulnerabilities
6 known vulnerabilities in BIG-IP Next Central Manager from F5. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
BIG-IP: Improper Resource Shutdown or Release
When a Stream Control Transmission Protocol (SCTP) profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluate
- 7.5 High severity
BIG-IP: Allocation of Resources Without Limits or Throttling
When a BIG-IP HTTP/2 httprouter profile is configured on a virtual server, undisclosed responses can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
- 8.8 High severity
The Central Manager user session refresh token does not expire when a user logs out.
The Central Manager user session refresh token does not expire when a user logs out. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
- 7.4 High severity
BIG-IP Next Central Manager: Channel Accessible by Non-Endpoint
BIG-IP Next Central Manager (CM) may allow an unauthenticated, remote attacker to obtain the BIG-IP Next LTM/WAF instance credentials. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
- 7.5 High severity
BIG-IP Next Central Manager: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability exists in the BIG-IP Next Central Manager API (URI). Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
- 7.5 High severity
BIG-IP Next Central Manager: Improper Neutralization of Special Elements used in an SQL Command
An OData injection vulnerability exists in the BIG-IP Next Central Manager API (URI). Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.