FL
Product
Floodlight
by projectfloodlight · last CVE Sep 13, 2026
6
CVEs
0
On KEV
6.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 5Low 1
Watch

Add Floodlight to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-51406
6.2
0%
Nov 1
Floodlight SDN Open Flow Controller v.1.2 has an issue that allows local hosts to build fake LLDP packets that allow specific clusters to be missed by Floodlight, which in turn…
Affected: 1.2
CVE-2024-51407
6.2
0%
Nov 1
Floodlight SDN OpenFlow Controller v.1.2 has an issue that allows local hosts to construct false broadcast ports causing inter-host communication anomalies
Affected: 1.2
CVE-2018-1000163
6.1
1%
Apr 18
Floodlight version 1.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in the web console that can result in javascript injections into the web page
Affected: through 1.2
CVE-2024-57672
5.5
0%
Feb 6
An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module, Topologylnstance module, Routing module
Affected: 1.2
CVE-2024-57673
5.5
0%
Feb 6
An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module and Linkdiscovery module
Affected: 1.2
CVE-2025-45480
3.0
0%
Sep 13
Floodlight 71fe8a7 allows disruption of host communication via link spoofing
Affected: 71fe8a7e72096eb0fd96c1d814a04e3b7b782830
Showing 6