Login Request a demo
TC
Product
Traffic Control
by Apache · last CVE Oct 16, 2025
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 4Medium 2Low 0
Severity
All severities8Critical2High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Traffic Control to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-17522
5.8
4%
Jan 26
When ORT (now via atstccfg) generates ip_allow.config files in Apache Traffic Control 3.0.0 to 3.1.0 and 4.0.0 to 4.1.0, those files include permissions that allow bad actors to…
Affected: 3.0.0 through 3.1.0; 4.0.0 through 4.1.0
CVE-2021-42009
4.3
3%
Oct 12
An authenticated Apache Traffic Control Traffic Ops user with Portal-level privileges can send a request with a specially-crafted email subject to the /deliveryservices/request…
Affected: 4.1.0 before 5.1.3
Showing 2