CVE-2024-21793 HIGH

CVE-2024-21793: BIG-IP Central Manager OData Injection Vulnerability

Vendor F5

Product BIG-IP Next Central Manager

Weakness CWE-89 · SQLi

Published May 8, 2024

Last update September 18, 2025

View on NVD All CVEs

CVSS base score

7.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

An OData injection vulnerability exists in the BIG-IP Next Central Manager API (URI). Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Key dates

02Disclosure timeline

May 8, 2024 CVE published

September 18, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-21793 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2026-12110 Taskbuilder <= 5.0.8 - Authenticated (Subscriber+) SQL Injection via 'task_search' Parameter CVE-2026-13552 itsourcecode Online Hotel Management System controller.php edit sql injection CVE-2025-53648 Apache Gravitino: SQL misconfiguration can access or truncate files CVE-2026-34103 Guardian Language-System Unauthenticated SQL Injection via id Parameter in subtitles.php CVE-2026-13569 weng-xianhu EyouCMS API index.php sql injection