Skip to main content

Nginx Security Monitoring

2 CVEs product

Monthly

CVE-2023-28724 May 03, 15:15 HIGH This Week

NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify sensitive files on NGINX Instance Manager and NGINX API Connectivity Manager. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Nginx Nginx Instance Manager Nginx Api Connectivity Manager Nginx Security Monitoring +1
NVD
CVSS 3.1
7.1
EPSS
0.2%
CVE-2023-28656 May 03, 15:15 HIGH This Week

NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assigned environment. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Nginx Nginx Instance Manager Cloud Backup Ontap Select Deploy +4
NVD
CVSS 3.1
8.1
EPSS
0.5%
EPSS 0% CVSS 7.1
HIGH This Week

NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify sensitive files on NGINX Instance Manager and NGINX API Connectivity Manager. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Nginx Nginx Instance Manager +3
NVD
EPSS 1% CVSS 8.1
HIGH This Week

NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assigned environment. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Nginx Nginx Instance Manager +6
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy