f5 big-ip next central manager

Name: f5 big-ip next central manager
Brand: f5

productUS

cpe:2.3:a:f5:big-ip_next_central_manager:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical8high9medium1low

updated 2026-10-28

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-5010US	high7.5	20.7% (98th)	Exploit	no fix	2019-10-31	—
CVE-2024-26026US	high7.5	7.16% (94th)	Exploit	20.2.0	2024-05-08	20.0.1 → 20.2.0
CVE-2025-20029US	—	7.15% (94th)	Exploit	no fix	2025-02-05	—
CVE-2024-21793US	high7.5	7.09% (94th)	Exploit	20.2.0	2024-05-08	20.0.1 → 20.2.0
CVE-2025-23419US	—OT elevated	2.79% (86th)	Exploit	no fix	2025-02-05	—
CVE-2022-26488US	high7.0	1.49% (74th)	Exploit	no fix	2022-03-10	—
CVE-2024-56337US	—	8.97% (95th)	—	no fix	2024-12-20	—
CVE-2014-0064US	medium6.5	5.35% (93rd)	—	no fix	2014-03-31	—
CVE-2019-16056US	high7.5OT elevated	5.12% (92nd)	—	no fix	2019-09-06	—
CVE-2014-0065US	medium6.5	5.05% (92nd)	—	no fix	2014-03-31	—
CVE-2014-0066US	medium4.0	4.68% (92nd)	—	no fix	2014-03-31	—
CVE-2025-23239US	high8.7	0.76% (55th)	—	no fix	2025-02-05	—
CVE-2024-32049US	high7.4	0.55% (46th)	—	20.1.0	2024-05-08	20.0.1 → 20.1.0
CVE-2025-54500US	medium5.3	0.50% (42nd)	—	no fix	2025-08-13	= 20.3.0
CVE-2014-0067US	medium4.6	0.48% (42nd)	—	no fix	2014-03-31	—
CVE-2025-21091US	—	0.45% (39th)	—	no fix	2025-02-05	—
CVE-2024-37028US	medium5.3	0.45% (39th)	—	20.2.1	2024-08-14	20.1.0 → 20.2.1
CVE-2024-39809US	high8.8	0.44% (38th)	—	no fix	2024-08-14	= 20.1.0
CVE-2025-36504US	—	0.44% (38th)	—	no fix	2025-05-07	2 versions
CVE-2025-24320US	—	0.43% (38th)	—	no fix	2025-02-05	—
CVE-2025-41399US	—	0.43% (37th)	—	no fix	2025-05-07	= 20.2.0
CVE-2025-24497US	—	0.41% (35th)	—	no fix	2025-02-05	—
CVE-2025-24326US	—	0.41% (35th)	—	no fix	2025-02-05	—
CVE-2025-23412US	—	0.41% (35th)	—	no fix	2025-02-05	—
CVE-2025-22891US	—	0.41% (35th)	—	no fix	2025-02-05	—
CVE-2025-22846US	—	0.41% (35th)	—	no fix	2025-02-05	—
CVE-2025-21087US	—	0.41% (35th)	—	no fix	2025-02-05	—
CVE-2025-20058US	—	0.41% (35th)	—	no fix	2025-02-05	—
CVE-2025-20045US	—	0.41% (35th)	—	no fix	2025-02-05	—
CVE-2025-24312US	—	0.40% (34th)	—	no fix	2025-02-05	—
CVE-2025-24319US	medium6.5	0.39% (33rd)	—	20.3.0	2025-02-05	2 versions
CVE-2024-33612US	medium6.8	0.23% (14th)	—	20.2.0	2024-05-08	20.0.1 → 20.2.0
CVE-2024-36242US	—	0.18% (7th)	—	no fix	2024-11-13	—
CVE-2024-38660US	—	0.17% (6th)	—	no fix	2024-11-13	—
CVE-2025-23413US	—	0.16% (5th)	—	20.3.0	2025-02-05	2 versions
CVE-2024-41719US	medium5.5	0.15% (4th)	—	20.2.1	2024-08-14	20.1.0 → 20.2.1
CVE-2025-23415US	low3.1OT elevated	0.14% (3rd)	—	no fix	2025-02-05	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation3 CVEs
CWE-476NULL Pointer Dereference3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-287Improper Authentication2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-404Improper Resource Shutdown or Release2 CVEs
CWE-532Insertion of Sensitive Information into Log File2 CVEs
CWE-693Protection Mechanism Failure2 CVEs

sources (2)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)27 CVEs
USNVD / CVE12 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan