[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fF7RFLhxrxA7nHwGCxMlNHMeg8LqBqO2tVlFdESeGLn0":3,"g5a-family:f5\u002Fnginx_ingress_controller":356,"g5a-ex:f5\u002Fnginx_ingress_controller@*":357},{"success":4,"data":5},true,{"product":6,"versions":197,"topVulnerabilitiesByEpss":288,"kevVulnerabilities":329,"seoMetadata":334,"meta":353},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":196},"f5","nginx_ingress_controller",90,7,1,"2024-11-06",[14,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,130,132,134,136,138,140,142,144,146,148,150,152,154,156,158,160,162,164,166,168,170,172,174,176,178,180,182,184,186,188,190,192,194],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"0.3",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"0.4.0",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"0.5.0",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"0.6.0",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"0.7.0",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"0.8.0",{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},"0.8.1",{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},"0.9.0",{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},"1.0.0",{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"1.1.0",{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},"1.10.0",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"1.10.1",{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},"1.1.1",{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},"1.11.0",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"1.11.1",{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},"1.11.2",{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"1.11.3",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"1.12.0",{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},"1.12.1",{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},"1.12.2",{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},"1.12.3",{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},"1.12.4",{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},"1.2.0",{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.0",{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.1",{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},"1.3.2",{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.0",{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.1",{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.2",{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.3",{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.4",{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.5",{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},"1.4.6",{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.0",{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.1",{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.2",{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.3",{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.4",{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.5",{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.6",{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.7",{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},"1.5.8",{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},"1.6.0",{"version":103,"cve_count":16,"kev_count":16,"has_kev":17},"1.6.1",{"version":105,"cve_count":16,"kev_count":16,"has_kev":17},"1.6.2",{"version":107,"cve_count":16,"kev_count":16,"has_kev":17},"1.6.3",{"version":109,"cve_count":16,"kev_count":16,"has_kev":17},"1.7.0",{"version":111,"cve_count":16,"kev_count":16,"has_kev":17},"1.7.1",{"version":113,"cve_count":16,"kev_count":16,"has_kev":17},"1.7.2",{"version":115,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.0",{"version":117,"cve_count":16,"kev_count":16,"has_kev":17},"1.8.1",{"version":119,"cve_count":16,"kev_count":16,"has_kev":17},"1.9.0",{"version":121,"cve_count":16,"kev_count":16,"has_kev":17},"1.9.1",{"version":123,"cve_count":16,"kev_count":16,"has_kev":17},"2.0.0",{"version":125,"cve_count":16,"kev_count":16,"has_kev":17},"2.0.1",{"version":127,"cve_count":16,"kev_count":16,"has_kev":17},"2.0.2",{"version":129,"cve_count":16,"kev_count":16,"has_kev":17},"2.0.3",{"version":131,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.0",{"version":133,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.1",{"version":135,"cve_count":16,"kev_count":16,"has_kev":17},"2.1.2",{"version":137,"cve_count":16,"kev_count":16,"has_kev":17},"2.2.0",{"version":139,"cve_count":16,"kev_count":16,"has_kev":17},"2.4.2",{"version":141,"cve_count":16,"kev_count":16,"has_kev":17},"3.0.0",{"version":143,"cve_count":16,"kev_count":16,"has_kev":17},"3.0.1",{"version":145,"cve_count":16,"kev_count":16,"has_kev":17},"3.0.2",{"version":147,"cve_count":16,"kev_count":16,"has_kev":17},"3.1.0",{"version":149,"cve_count":16,"kev_count":16,"has_kev":17},"3.1.1",{"version":151,"cve_count":16,"kev_count":16,"has_kev":17},"3.2.0",{"version":153,"cve_count":16,"kev_count":16,"has_kev":17},"3.2.1",{"version":155,"cve_count":16,"kev_count":16,"has_kev":17},"3.3.0",{"version":157,"cve_count":16,"kev_count":16,"has_kev":17},"3.3.1",{"version":159,"cve_count":16,"kev_count":16,"has_kev":17},"3.3.2",{"version":161,"cve_count":16,"kev_count":16,"has_kev":17},"3.4.0",{"version":163,"cve_count":16,"kev_count":16,"has_kev":17},"3.4.1",{"version":165,"cve_count":16,"kev_count":16,"has_kev":17},"3.4.2",{"version":167,"cve_count":16,"kev_count":16,"has_kev":17},"3.4.3",{"version":169,"cve_count":16,"kev_count":16,"has_kev":17},"3.5.0",{"version":171,"cve_count":16,"kev_count":16,"has_kev":17},"3.5.1",{"version":173,"cve_count":16,"kev_count":16,"has_kev":17},"3.5.2",{"version":175,"cve_count":16,"kev_count":16,"has_kev":17},"3.6.0",{"version":177,"cve_count":16,"kev_count":16,"has_kev":17},"3.6.1",{"version":179,"cve_count":16,"kev_count":16,"has_kev":17},"3.6.2",{"version":181,"cve_count":16,"kev_count":16,"has_kev":17},"3.7.0",{"version":183,"cve_count":16,"kev_count":16,"has_kev":17},"3.7.1",{"version":185,"cve_count":16,"kev_count":16,"has_kev":17},"3.7.2",{"version":187,"cve_count":16,"kev_count":16,"has_kev":17},"4.0.0",{"version":189,"cve_count":16,"kev_count":16,"has_kev":17},"4.0.1",{"version":191,"cve_count":16,"kev_count":16,"has_kev":17},"5.0.0",{"version":193,"cve_count":16,"kev_count":16,"has_kev":17},"5.3.0",{"version":195,"cve_count":16,"kev_count":16,"has_kev":17},"5.3.2","Nginx Ingress Controller by F5 is a technology product with 90 tracked versions and 7 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":16,"kev_count":16,"has_kev":17},{"version":31,"cve_count":16,"kev_count":16,"has_kev":17},{"version":33,"cve_count":16,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":16,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":16,"kev_count":16,"has_kev":17},{"version":43,"cve_count":16,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},{"version":53,"cve_count":16,"kev_count":16,"has_kev":17},{"version":55,"cve_count":16,"kev_count":16,"has_kev":17},{"version":57,"cve_count":16,"kev_count":16,"has_kev":17},{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},{"version":67,"cve_count":16,"kev_count":16,"has_kev":17},{"version":69,"cve_count":16,"kev_count":16,"has_kev":17},{"version":71,"cve_count":16,"kev_count":16,"has_kev":17},{"version":73,"cve_count":16,"kev_count":16,"has_kev":17},{"version":75,"cve_count":16,"kev_count":16,"has_kev":17},{"version":77,"cve_count":16,"kev_count":16,"has_kev":17},{"version":79,"cve_count":16,"kev_count":16,"has_kev":17},{"version":81,"cve_count":16,"kev_count":16,"has_kev":17},{"version":83,"cve_count":16,"kev_count":16,"has_kev":17},{"version":85,"cve_count":16,"kev_count":16,"has_kev":17},{"version":87,"cve_count":16,"kev_count":16,"has_kev":17},{"version":89,"cve_count":16,"kev_count":16,"has_kev":17},{"version":91,"cve_count":16,"kev_count":16,"has_kev":17},{"version":93,"cve_count":16,"kev_count":16,"has_kev":17},{"version":95,"cve_count":16,"kev_count":16,"has_kev":17},{"version":97,"cve_count":16,"kev_count":16,"has_kev":17},{"version":99,"cve_count":16,"kev_count":16,"has_kev":17},{"version":101,"cve_count":16,"kev_count":16,"has_kev":17},{"version":103,"cve_count":16,"kev_count":16,"has_kev":17},{"version":105,"cve_count":16,"kev_count":16,"has_kev":17},{"version":107,"cve_count":16,"kev_count":16,"has_kev":17},{"version":109,"cve_count":16,"kev_count":16,"has_kev":17},{"version":111,"cve_count":16,"kev_count":16,"has_kev":17},{"version":113,"cve_count":16,"kev_count":16,"has_kev":17},{"version":115,"cve_count":16,"kev_count":16,"has_kev":17},{"version":117,"cve_count":16,"kev_count":16,"has_kev":17},{"version":119,"cve_count":16,"kev_count":16,"has_kev":17},{"version":121,"cve_count":16,"kev_count":16,"has_kev":17},{"version":123,"cve_count":16,"kev_count":16,"has_kev":17},{"version":125,"cve_count":16,"kev_count":16,"has_kev":17},{"version":127,"cve_count":16,"kev_count":16,"has_kev":17},{"version":129,"cve_count":16,"kev_count":16,"has_kev":17},{"version":131,"cve_count":16,"kev_count":16,"has_kev":17},{"version":133,"cve_count":16,"kev_count":16,"has_kev":17},{"version":135,"cve_count":16,"kev_count":16,"has_kev":17},{"version":137,"cve_count":16,"kev_count":16,"has_kev":17},{"version":139,"cve_count":16,"kev_count":16,"has_kev":17},{"version":141,"cve_count":16,"kev_count":16,"has_kev":17},{"version":143,"cve_count":16,"kev_count":16,"has_kev":17},{"version":145,"cve_count":16,"kev_count":16,"has_kev":17},{"version":147,"cve_count":16,"kev_count":16,"has_kev":17},{"version":149,"cve_count":16,"kev_count":16,"has_kev":17},{"version":151,"cve_count":16,"kev_count":16,"has_kev":17},{"version":153,"cve_count":16,"kev_count":16,"has_kev":17},{"version":155,"cve_count":16,"kev_count":16,"has_kev":17},{"version":157,"cve_count":16,"kev_count":16,"has_kev":17},{"version":159,"cve_count":16,"kev_count":16,"has_kev":17},{"version":161,"cve_count":16,"kev_count":16,"has_kev":17},{"version":163,"cve_count":16,"kev_count":16,"has_kev":17},{"version":165,"cve_count":16,"kev_count":16,"has_kev":17},{"version":167,"cve_count":16,"kev_count":16,"has_kev":17},{"version":169,"cve_count":16,"kev_count":16,"has_kev":17},{"version":171,"cve_count":16,"kev_count":16,"has_kev":17},{"version":173,"cve_count":16,"kev_count":16,"has_kev":17},{"version":175,"cve_count":16,"kev_count":16,"has_kev":17},{"version":177,"cve_count":16,"kev_count":16,"has_kev":17},{"version":179,"cve_count":16,"kev_count":16,"has_kev":17},{"version":181,"cve_count":16,"kev_count":16,"has_kev":17},{"version":183,"cve_count":16,"kev_count":16,"has_kev":17},{"version":185,"cve_count":16,"kev_count":16,"has_kev":17},{"version":187,"cve_count":16,"kev_count":16,"has_kev":17},{"version":189,"cve_count":16,"kev_count":16,"has_kev":17},{"version":191,"cve_count":16,"kev_count":16,"has_kev":17},{"version":193,"cve_count":16,"kev_count":16,"has_kev":17},{"version":195,"cve_count":16,"kev_count":16,"has_kev":17},[289,297,303,308,315,320,325],{"cveId":290,"description":291,"publishedDate":292,"cvssScore":293,"cvssVersion":294,"severity":295,"isKev":4,"epssScore":296},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.","2023-10-10",7.5,"v3.1","High",0.99999,{"cveId":298,"description":299,"publishedDate":300,"cvssScore":301,"cvssVersion":294,"severity":295,"isKev":17,"epssScore":302},"CVE-2022-41742","NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted audio or video file. The issue affects only NGINX products that are built with the module ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module.","2022-10-19",7.1,0.01179,{"cveId":304,"description":305,"publishedDate":300,"cvssScore":306,"cvssVersion":294,"severity":295,"isKev":17,"epssScore":307},"CVE-2022-41741","NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its termination or potential other impact using a specially crafted audio or video file. The issue affects only NGINX products that are built with the ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module.",7.8,0.00811,{"cveId":309,"description":310,"publishedDate":311,"cvssScore":312,"cvssVersion":294,"severity":313,"isKev":17,"epssScore":314},"CVE-2021-23055","On version 2.x before 2.0.3 and 1.x before 1.12.3, the command line restriction that controls snippet use with NGINX Ingress Controller does not apply to Ingress objects. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","2022-04-21",6.5,"Medium",0.00769,{"cveId":316,"description":317,"publishedDate":318,"cvssScore":312,"cvssVersion":294,"severity":313,"isKev":17,"epssScore":319},"CVE-2022-30535","In versions 2.x before 2.3.0 and all versions of 1.x, An attacker authorized to create or update ingress objects can obtain the secrets available to the NGINX Ingress Controller. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.","2022-08-04",0.00694,{"cveId":321,"description":322,"publishedDate":12,"cvssScore":323,"cvssVersion":294,"severity":313,"isKev":17,"epssScore":324},"CVE-2024-10318","A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not checked at login time. This flaw allows an attacker to fix a victim's session to an attacker-controlled account. As a result, although the attacker cannot log in as the victim, they can force the session to associate it with the attacker-controlled account, leading to potential misuse of the victim's session.",5.4,0.00369,{"cveId":326,"description":327,"publishedDate":300,"cvssScore":10,"cvssVersion":294,"severity":295,"isKev":17,"epssScore":328},"CVE-2022-41743","NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_hls_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its crash or potential other impact using a specially crafted audio or video file. The issue affects only NGINX Plus when the hls directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_hls_module.",0.0023,[330],{"cveId":290,"description":291,"publishedDate":292,"cvssScore":293,"severity":295,"isKev":4,"epssScore":296,"cisaVulnName":331,"cisaDateAdded":292,"cisaShortDescription":332,"cisaRequiredAction":333},"HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"title":335,"metaDescription":336,"keywords":337,"structuredData":338},"Nginx Ingress Controller by F5 - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Nginx Ingress Controller by F5 covering 90 versions with 7 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Nginx Ingress Controller vulnerabilities, Nginx Ingress Controller security, Nginx Ingress Controller CVE, F5 Nginx Ingress Controller, Nginx Ingress Controller threat intelligence, F5 security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Nginx Ingress Controller KEV, Nginx Ingress Controller exploited vulnerabilities",{"@context":339,"@type":340,"name":341,"description":336,"url":342,"manufacturer":343,"applicationCategory":347,"softwareVersion":348,"mainEntity":349},"https:\u002F\u002Fschema.org","SoftwareApplication","Nginx Ingress Controller","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ff5\u002Fnginx_ingress_controller",{"@type":344,"name":345,"url":346},"Organization","F5","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ff5","Security Software","90 versions tracked",{"@type":350,"name":351,"description":352,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Nginx Ingress Controller Security Vulnerabilities","Security vulnerabilities affecting Nginx Ingress Controller by F5",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":354,"apiVersion":355},"2026-10-17T17:06:25.410Z","3.0",[],{"rows":358,"total":11,"capped":17,"failed":11},[359],{"cveId":290,"name":331,"severity":295,"cvss":293,"added":292,"epss":296,"published":292,"ranges":360,"hits":361,"checked":17,"covers":17},[],[]]