Login Request a demo
TC
Product
Traffic Control
by Apache · last CVE Oct 16, 2025
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 4Medium 2Low 0
Severity
All severities8Critical2High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Traffic Control to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-45387
8.8
65%
Dec 23
Apache Traffic Control: SQL Injection in Traffic Ops endpoint PUT deliveryservice_request_comments
Affected: 8.0.0 before 8.0.2
CVE-2025-61581
7.5
1%
Oct 16
Apache Traffic Control: ReDoS issue in Traffic Router configuration
Affected: through 8.0.2
CVE-2022-23206
7.5
2%
Feb 6
In Apache Traffic Control Traffic Ops prior to 6.1.0 or 5.1.6, an unprivileged user who can reach Traffic Ops over HTTPS can send a specially-crafted POST request to…
Affected: before 5.1.6; 6.0.0 before 6.1.0
CVE-2017-7670
7.5
5%
Jul 10
The Traffic Router component of the incubating Apache Traffic Control project is vulnerable to a Slowloris style Denial of Service attack
Affected: through 1.8.0; 1.8.1; 2.0.0; 2.0.0; 2.0.0; 2.0.0; +2 more
Showing 4