PT-2024-19061
CVE-2024-21793
·
Published
2024-05-08
·
Updated
2025-09-18
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
F5 BIG-IP Next Central Manager (affected versions not specified)
Description
An OData injection vulnerability exists in the BIG-IP Next Central Manager API. The issue affects the API endpoint, but specific details about the endpoint, such as
/api/v1/login or /users/{id}, are not provided. No information is available about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾