Vulnerabilities > F5 > BIG IP Next Central Manager > High

DATE CVE VULNERABILITY TITLE RISK
2024-08-14 CVE-2024-39809 Insufficient Session Expiration vulnerability in F5 Big-Ip Next Central Manager 20.1.0
The Central Manager user session refresh token does not expire when a user logs out.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
network
low complexity
f5 CWE-613
8.8
2024-05-08 CVE-2024-32049 Unspecified vulnerability in F5 Big-Ip Next Central Manager
BIG-IP Next Central Manager (CM) may allow an unauthenticated, remote attacker to obtain the BIG-IP Next LTM/WAF instance credentials.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
network
high complexity
f5
7.4
2024-05-08 CVE-2024-33612 Improper Certificate Validation vulnerability in F5 Big-Ip Next Central Manager 20.1.0
An improper certificate validation vulnerability exists in BIG-IP Next Central Manager and may allow an attacker to impersonate an Instance Provider system.
network
high complexity
f5 CWE-295
8.0