Atlassian Floodlight vulnerabilities
4 vulnerabilities
Known vulnerabilities in Atlassian Floodlight, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
PrioritiseCVE-2020-18683atlassian · floodlightatlassian floodlightFloodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of undefined fields mishandling.CVSS9.8CriticalEPSS1.29%PrioritiseCVE-2020-18685atlassian · floodlightatlassian floodlightFloodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked prerequisites related to TCP or UDP ports, or group or table IDs.CVSS9.8CriticalEPSS1.29%PrioritiseCVE-2020-18684atlassian · floodlightatlassian floodlightFloodlight through 1.2 has an integer overflow in checkFlow in StaticFlowEntryPusherResource.java via priority or port number.CVSS9.8CriticalEPSS1.29%RoutineCVE-2015-6569atlassian · floodlightatlassian floodlightRace condition in the LoadBalancer module in the Atlassian Floodlight Controller before 1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and thread crash) via a state manipulation attack.CVSS5.9MediumEPSS1.87%