NC
Product
Nginx Controller
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 11Medium 5Low 0
Watch
Add Nginx Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-27730 | 9.8 | Dec 11 | In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities Affected: 2.0.0 through 2.9.0; 3.0.0 before 3.10.0; 1.0.1 |
| CVE-2020-5901 | 9.6 | Jul 1 | In NGINX Controller 3.3.0-3.4.0, undisclosed API endpoints may allow for a reflected Cross Site Scripting (XSS) attack Affected: 3.3.0 through 3.4.0 |
Showing 2