Login Request a demo
TC
Product
Traffic Control
by Apache · last CVE Oct 16, 2025
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 4Medium 2Low 0
Severity
All severities8Critical2High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Traffic Control to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-43350
9.8
5%
Nov 11
An unauthenticated Apache Traffic Control Traffic Ops user can send a request with a specially-crafted username to the POST /login endpoint of any API version to inject…
Affected: 5.1.0 before 5.1.4; 6.0.0 before 6.0.1; 5.1.4; 6.0.1
CVE-2019-12405
9.8
3%
Sep 9
Improper authentication is possible in Apache Traffic Control versions 3.0.0 and 3.0.1 if LDAP is enabled for login in the Traffic Ops API component
Affected: 3.0.0; 3.0.1
Showing 2