[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f97Ao1ehz5PsrAyeV5JN3Z9jBpiiKpbqnLGZG5dY2FBY":3,"g5a-ex:f5\u002Fnginx_controller@*":192,"g5a-family:f5\u002Fnginx_controller":194},{"success":4,"data":5},true,{"product":6,"versions":79,"topVulnerabilitiesByEpss":111,"kevVulnerabilities":169,"seoMetadata":170,"meta":189},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":78},"f5","nginx_controller",31,18,0,"2021-06-01",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.0.1",10,false,{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},"2.0.0",{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},"2.1.0",{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},"2.2.0",{"version":25,"cve_count":11,"kev_count":11,"has_kev":17},"2.3.0",{"version":27,"cve_count":11,"kev_count":11,"has_kev":17},"2.4.0",{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},"2.5.0",{"version":31,"cve_count":11,"kev_count":11,"has_kev":17},"2.6.0",{"version":33,"cve_count":11,"kev_count":11,"has_kev":17},"2.7.0",{"version":35,"cve_count":11,"kev_count":11,"has_kev":17},"2.8.0",{"version":37,"cve_count":11,"kev_count":11,"has_kev":17},"2.8.1",{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},"2.9.0",{"version":41,"cve_count":11,"kev_count":11,"has_kev":17},"3.0.0",{"version":43,"cve_count":11,"kev_count":11,"has_kev":17},"3.1.0",{"version":45,"cve_count":11,"kev_count":11,"has_kev":17},"3.10.0",{"version":47,"cve_count":11,"kev_count":11,"has_kev":17},"3.11.0",{"version":49,"cve_count":11,"kev_count":11,"has_kev":17},"3.12.0",{"version":51,"cve_count":11,"kev_count":11,"has_kev":17},"3.12.1",{"version":53,"cve_count":11,"kev_count":11,"has_kev":17},"3.13.0",{"version":55,"cve_count":11,"kev_count":11,"has_kev":17},"3.14.0",{"version":57,"cve_count":11,"kev_count":11,"has_kev":17},"3.15.0",{"version":59,"cve_count":11,"kev_count":11,"has_kev":17},"3.16.1",{"version":61,"cve_count":11,"kev_count":11,"has_kev":17},"3.17",{"version":63,"cve_count":11,"kev_count":11,"has_kev":17},"3.2.0",{"version":65,"cve_count":11,"kev_count":11,"has_kev":17},"3.3.0",{"version":67,"cve_count":11,"kev_count":11,"has_kev":17},"3.4.0",{"version":69,"cve_count":11,"kev_count":11,"has_kev":17},"3.5.0",{"version":71,"cve_count":11,"kev_count":11,"has_kev":17},"3.6.0",{"version":73,"cve_count":11,"kev_count":11,"has_kev":17},"3.7.0",{"version":75,"cve_count":11,"kev_count":11,"has_kev":17},"3.8.0",{"version":77,"cve_count":11,"kev_count":11,"has_kev":17},"3.9.0","Nginx Controller by F5 is a technology product with 31 tracked versions and 18 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},{"version":23,"cve_count":11,"kev_count":11,"has_kev":17},{"version":25,"cve_count":11,"kev_count":11,"has_kev":17},{"version":27,"cve_count":11,"kev_count":11,"has_kev":17},{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},{"version":31,"cve_count":11,"kev_count":11,"has_kev":17},{"version":33,"cve_count":11,"kev_count":11,"has_kev":17},{"version":35,"cve_count":11,"kev_count":11,"has_kev":17},{"version":37,"cve_count":11,"kev_count":11,"has_kev":17},{"version":39,"cve_count":11,"kev_count":11,"has_kev":17},{"version":41,"cve_count":11,"kev_count":11,"has_kev":17},{"version":43,"cve_count":11,"kev_count":11,"has_kev":17},{"version":45,"cve_count":11,"kev_count":11,"has_kev":17},{"version":47,"cve_count":11,"kev_count":11,"has_kev":17},{"version":49,"cve_count":11,"kev_count":11,"has_kev":17},{"version":51,"cve_count":11,"kev_count":11,"has_kev":17},{"version":53,"cve_count":11,"kev_count":11,"has_kev":17},{"version":55,"cve_count":11,"kev_count":11,"has_kev":17},{"version":57,"cve_count":11,"kev_count":11,"has_kev":17},{"version":59,"cve_count":11,"kev_count":11,"has_kev":17},{"version":61,"cve_count":11,"kev_count":11,"has_kev":17},{"version":63,"cve_count":11,"kev_count":11,"has_kev":17},{"version":65,"cve_count":11,"kev_count":11,"has_kev":17},{"version":67,"cve_count":11,"kev_count":11,"has_kev":17},{"version":69,"cve_count":11,"kev_count":11,"has_kev":17},{"version":71,"cve_count":11,"kev_count":11,"has_kev":17},{"version":73,"cve_count":11,"kev_count":11,"has_kev":17},{"version":75,"cve_count":11,"kev_count":11,"has_kev":17},{"version":77,"cve_count":11,"kev_count":11,"has_kev":17},[112,120,126,133,139,145,151,156,160,164],{"cveId":113,"description":114,"publishedDate":115,"cvssScore":116,"cvssVersion":117,"severity":118,"isKev":17,"epssScore":119},"CVE-2020-27730","In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities.","2020-12-11",9.8,"v3.1","Critical",0.01714,{"cveId":121,"description":122,"publishedDate":123,"cvssScore":124,"cvssVersion":117,"severity":118,"isKev":17,"epssScore":125},"CVE-2020-5901","In NGINX Controller 3.3.0-3.4.0, undisclosed API endpoints may allow for a reflected Cross Site Scripting (XSS) attack. If the victim user is logged in as admin this could result in a complete compromise of the system.","2020-07-01",9.6,0.01466,{"cveId":127,"description":128,"publishedDate":129,"cvssScore":130,"cvssVersion":117,"severity":131,"isKev":17,"epssScore":132},"CVE-2020-5910","In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the Neural Autonomic Transport System (NATS) messaging services in use by the NGINX Controller do not require any form of authentication, so any successful connection would be authorized.","2020-07-02",7.5,"High",0.01154,{"cveId":134,"description":135,"publishedDate":136,"cvssScore":137,"cvssVersion":117,"severity":131,"isKev":17,"epssScore":138},"CVE-2020-5863","In NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to the Controller API can create unprivileged user accounts. The user which is created is only able to upload a new license to the system but cannot view or modify any other components of the system.","2020-03-27",8.6,0.01151,{"cveId":140,"description":141,"publishedDate":142,"cvssScore":143,"cvssVersion":117,"severity":131,"isKev":17,"epssScore":144},"CVE-2020-5864","In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by default.","2020-04-23",7.4,0.01059,{"cveId":146,"description":147,"publishedDate":148,"cvssScore":149,"cvssVersion":117,"severity":131,"isKev":17,"epssScore":150},"CVE-2020-5894","On versions 3.0.0-3.3.0, the NGINX Controller webserver does not invalidate the server-side session token after users log out.","2020-05-07",8.1,0.01019,{"cveId":152,"description":153,"publishedDate":129,"cvssScore":154,"cvssVersion":117,"severity":131,"isKev":17,"epssScore":155},"CVE-2020-5911","In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller installer starts the download of Kubernetes packages from an HTTP URL On Debian\u002FUbuntu system.",7.3,0.01006,{"cveId":157,"description":158,"publishedDate":12,"cvssScore":143,"cvssVersion":117,"severity":131,"isKev":17,"epssScore":159},"CVE-2021-23018","Intra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before 3.4.0 namespace are using cleartext protocols inside the cluster.",0.00544,{"cveId":161,"description":162,"publishedDate":142,"cvssScore":149,"cvssVersion":117,"severity":131,"isKev":17,"epssScore":163},"CVE-2020-5867","In versions prior to 3.3.0, the NGINX Controller Agent installer script 'install.sh' uses HTTP instead of HTTPS to check and install packages",0.00476,{"cveId":165,"description":166,"publishedDate":123,"cvssScore":167,"cvssVersion":117,"severity":131,"isKev":17,"epssScore":168},"CVE-2020-5900","In versions 3.0.0-3.4.0, 2.0.0-2.9.0, and 1.0.1, there is insufficient cross-site request forgery (CSRF) protections for the NGINX Controller user interface.",8.8,0.00452,[],{"title":171,"metaDescription":172,"keywords":173,"structuredData":174},"Nginx Controller by F5 - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Nginx Controller by F5 covering 31 versions with 18 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Nginx Controller vulnerabilities, Nginx Controller security, Nginx Controller CVE, F5 Nginx Controller, Nginx Controller threat intelligence, F5 security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":175,"@type":176,"name":177,"description":172,"url":178,"manufacturer":179,"applicationCategory":183,"softwareVersion":184,"mainEntity":185},"https:\u002F\u002Fschema.org","SoftwareApplication","Nginx Controller","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ff5\u002Fnginx_controller",{"@type":180,"name":181,"url":182},"Organization","F5","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ff5","Security Software","31 versions tracked",{"@type":186,"name":187,"description":188,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Nginx Controller Security Vulnerabilities","Security vulnerabilities affecting Nginx Controller by F5",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":190,"apiVersion":191},"2026-10-17T17:06:25.426Z","3.0",{"rows":193,"total":11,"capped":17,"failed":11},[],[195],{"product":196,"cves":197},"nginx_controller_api_management",1]