CVE-2020-5864

7.4 highEPSS 1.1%

High (7.4) in f5 nginx controller. EPSS 1.1% chance of exploitation in the next 30 days.

In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by default.

Severity

7.4 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2020-04-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19