Approved changes feed: RSS · Atom

cpe:2.3:a:f5:nginx_unit:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductNginx Unit (b0035728-6104-58dd-8864-b5cdb4046409)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-1695 vulnerable 2026-06-08 07:08:37.746534 NGINX Unit Java Vulnerability
MEDIUM (5.3)
In NGINX Unit before version 1.34.2 with the Java Language Module in use, undisclosed requests can lead to an infinite loop and cause an increase in CPU resource utilization. This vulnerability allows a remote attacker to cause a degradation that can lead to a limited denial-of-service (DoS).  There is no control plane exposure; this is a data plane issue only.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2025-03-04T00:54:52.240Z
Updated: 2025-03-04T16:33:18.911Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7401 vulnerable 2026-06-08 05:14:14.411934 Details available
NGINX Unit before 1.7.1 might allow an attacker to cause a heap-based buffer overflow in the router process with a specially crafted request. This may result in a denial of service (router process crash) or possibly have unspecified other impact.
Published: 2019-02-08T03:00:00.000Z
Updated: 2024-08-04T20:46:46.265Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.