Vulnerabilities > F5 > Nginx Instance Manager > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-11-06 CVE-2024-10318 Session Fixation vulnerability in F5 products
A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not checked at login time.
network
low complexity
f5 CWE-384
5.4
2023-03-29 CVE-2023-1550 Information Exposure Through Log Files vulnerability in F5 Nginx Agent and Nginx Instance Manager
Insertion of Sensitive Information into log file vulnerability in NGINX Agent.
local
low complexity
f5 CWE-532
5.5
2022-08-04 CVE-2022-35241 Resource Exhaustion vulnerability in F5 Nginx Instance Manager
In versions 2.x before 2.3.1 and all versions of 1.x, when NGINX Instance Manager is in use, undisclosed requests can cause an increase in disk resource utilization.
network
low complexity
f5 CWE-400
6.5