F5 Big-ip Next Central Manager

9 CVEs affecting F5 Big-ip Next Central Manager. Latest disclosed: 2025-02-05. Critical: 0, High: 4.

Top CVEs affecting F5 Big-ip Next Central Manager
CVESeverityScorePublishedSummary
CVE-2024-39809High7.52024-08-14The Central Manager user session refresh token does not expire when a user logs out.  Note: Software versions which have reached End of Technical Support (EoTS…
CVE-2024-26026High7.52024-05-08An SQL injection vulnerability exists in the BIG-IP Next Central Manager API (URI).  Note: Software versions which have reached End of Technical Support (EoTS)…
CVE-2024-21793High7.52024-05-08An OData injection vulnerability exists in the BIG-IP Next Central Manager API (URI).  Note: Software versions which have reached End of Technical Support (EoT…
CVE-2024-32049High7.42024-05-08BIG-IP Next Central Manager (CM) may allow an unauthenticated, remote attacker to obtain the BIG-IP Next LTM/WAF instance credentials.  Note: Software version…
CVE-2024-33612Medium6.82024-05-08An improper certificate validation vulnerability exists in BIG-IP Next Central Manager and may allow an attacker to impersonate an Instance Provider system.  N…
CVE-2025-24319Medium6.52025-02-05When BIG-IP Next Central Manager is running, undisclosed requests to the BIG-IP Next Central Manager API can cause the BIG-IP Next Central Manager Node's Kuber…
CVE-2024-37028Medium5.32024-08-14BIG-IP Next Central Manager may allow an attacker to lock out an account that has never been logged in.  Note: Software versions which have reached End of Tech…
CVE-2025-23413Medium4.42025-02-05When users log in through the webUI or API using local authentication, BIG-IP Next Central Manager may log sensitive information in the pgaudit log files. N…
CVE-2024-41719Medium4.22024-08-14When generating QKView of BIG-IP Next instance from the BIG-IP Next Central Manager (CM), F5 iHealth credentials will be logged in the BIG-IP Central Manager…