CVE-2024-28132

4.4 mediumEPSS 0.2%

Medium (4.4) in f5 big-ip next cloud-native network functions. EPSS 0.2% chance of exploitation in the next 30 days.

Exposure of Sensitive Information vulnerability exists in the GSLB container, which may allow an authenticated attacker with local access to view sensitive information. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Severity

CVSS 3.1

4.4 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-31)
CWE: CWE-922
Published: 2024-05-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

f5:big-ip_next_cloud-native_network_functions

References

https://my.f5.com/manage/s/article/K000138913
https://my.f5.com/manage/s/article/K000138913

Check your stack JSON