Approved changes feed: RSS · Atom

cpe:2.3:a:f5:big-ip_next_central_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorF5 (cb05c4a2-e02e-586f-b9d0-d0370178d1e5)
ProductBig Ip Next Central Manager (656b05c4-77a7-5efa-8407-a95e2be314a1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-24319 vulnerable 2026-06-08 07:12:48.459026 BIG-IP Next Central Manager vulnerability
MEDIUM (6.5)
When BIG-IP Next Central Manager is running, undisclosed requests to the BIG-IP Next Central Manager API can cause the BIG-IP Next Central Manager Node's Kubernetes service to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2025-02-05T17:31:06.003Z
Updated: 2025-02-12T19:41:06.452Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-23413 vulnerable 2026-06-08 07:10:55.719562 BIG-IP Next Central Manager vulnerability
MEDIUM (4.4)
When users log in through the webUI or API using local authentication, BIG-IP Next Central Manager may log sensitive information in the pgaudit log files. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2025-02-05T17:31:06.882Z
Updated: 2025-02-12T19:41:06.310Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-41719 vulnerable 2026-06-08 06:43:54.984786 BIG-IP Next Central Manager vulnerability
MEDIUM (4.2)
When generating QKView of BIG-IP Next instance from the BIG-IP Next Central Manager (CM), F5 iHealth credentials will be logged in the BIG-IP Central Manager logs.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2024-08-14T14:32:32.375Z
Updated: 2024-08-14T15:52:12.724Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-39809 vulnerable 2026-06-08 06:41:51.651024 BIG-IP Next Central Manager vulnerability
HIGH (7.5)
The Central Manager user session refresh token does not expire when a user logs out.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Published: 2024-08-14T14:32:32.789Z
Updated: 2024-08-22T03:55:17.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37028 vulnerable 2026-06-08 06:39:46.244626 BIG-IP Next Central Manager vulnerability
MEDIUM (5.3)
BIG-IP Next Central Manager may allow an attacker to lock out an account that has never been logged in.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Published: 2024-08-14T14:32:33.153Z
Updated: 2024-08-16T17:26:57.485Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-33612 vulnerable 2026-06-08 06:37:31.820821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32049 vulnerable 2026-06-08 06:35:32.674392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26026 vulnerable 2026-06-08 06:31:24.704254 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21793 vulnerable 2026-06-08 06:27:36.656206 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.