Nginx Controller
Vendor:
First CVE: Mar 27, 2020 · Active for 6 years
18
Total CVEs
More Total CVEs than 93% of tracked products
9.0
Avg CVEs / Year
Higher CVE frequency than 95% of tracked products
7.4
Avg CVSS
Higher Avg CVSS than 48% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Nginx Controller over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 27, 2020
6 years ago
Most Recent CVE
Jun 1, 2021
1,879 days ago
CVE Severity & Scoring
Nginx Controller18 CVEs
28%
61%
11%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local6 (33.3%)
Network12 (66.7%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low14 (77.8%)
High4 (22.2%)
Unknown0 (0.0%)
User Interaction
None14 (77.8%)
Unknown0 (0.0%)
Required4 (22.2%)
Privileges Required
Low6 (33.3%)
High0 (0.0%)
None12 (66.7%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (18 CVEs).
18 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-27730CRITICAL In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities. | Dec 11, 2020 | 9.8 | 31 | NO | NO |
CVE-2020-5863HIGH In NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to the Controller API can create unprivileged user accounts. The user which is created | Mar 27, 2020 | 8.6 | 27 | NO | NO |
CVE-2020-5899HIGH In NGINX Controller 3.0.0-3.4.0, recovery code required to change a user's password is transmitted and stored in the database in plain text, which allows an attacker who can interc | Jul 1, 2020 | 7.8 | 25 | NO | NO |
CVE-2021-23019HIGH The NGINX Controller 2.0.0 thru 2.9.0 and 3.x before 3.15.0 Administrator password may be exposed in the systemd.txt file that is included in the NGINX support package. | Jun 1, 2021 | 7.8 | 24 | NO | NO |
CVE-2020-5901CRITICAL In NGINX Controller 3.3.0-3.4.0, undisclosed API endpoints may allow for a reflected Cross Site Scripting (XSS) attack. If the victim user is logged in as admin this could result i | Jul 1, 2020 | 9.6 | 24 | NO | NO |
CVE-2021-23018HIGH Intra-cluster communication does not use TLS. The services within the NGINX Controller 3.x before 3.4.0 namespace are using cleartext protocols inside the cluster. | Jun 1, 2021 | 7.4 | 22 | NO | NO |
CVE-2020-5900HIGH In versions 3.0.0-3.4.0, 2.0.0-2.9.0, and 1.0.1, there is insufficient cross-site request forgery (CSRF) protections for the NGINX Controller user interface. | Jul 1, 2020 | 8.8 | 22 | NO | NO |
CVE-2020-5910HIGH In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the Neural Autonomic Transport System (NATS) messaging services in use by the NGINX Controller do not require any form of authentic | Jul 2, 2020 | 7.5 | 21 | NO | NO |
CVE-2020-5909MEDIUM In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, when users run the command displayed in NGINX Controller user interface (UI) to fetch the agent installer, the server TLS certifica | Jul 2, 2020 | 5.4 | 20 | NO | NO |
CVE-2020-5895HIGH On NGINX Controller versions 3.1.0-3.3.0, AVRD uses world-readable and world-writable permissions on its socket, which allows processes or users on the local system to write arbitr | May 7, 2020 | 7.8 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (18 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (18 CVEs).
Media Mentions
Signals from CVEs in this product scope (18 CVEs).
Top CNAs Publishing CVEs For Nginx Controller
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.0.1 | 10 | 7.3 | 0.8% | 0 | 0 |