PR
Vendor
projectfloodlight
10
CVEs
0
On KEV
0
New 30D
Products
FL6.2
Floodlight
projectfloodlight
6 CVEs0 on KEV0 new
OS7.5
Open Sdn Controller
Projectfloodlight
4 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-45480 | FL Floodlight projectfloodlight | 3.0 | Sep 13 | Floodlight 71fe8a7 allows disruption of host communication via link spoofing |
| CVE-2024-57672 | FL Floodlight Projectfloodlight | 5.5 | Feb 6 | An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module, Topologylnstance module, Routing module |
| CVE-2024-57673 | FL Floodlight Projectfloodlight | 5.5 | Feb 6 | An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module and Linkdiscovery module |
| CVE-2024-51406 | OS Open Sdn Controller Projectfloodlight | 6.2 | Nov 1 | Floodlight SDN Open Flow Controller v.1.2 has an issue that allows local hosts to build fake LLDP packets that allow specific clusters to be missed by Floodlight, which in turn… |
| CVE-2024-51407 | FL Floodlight Projectfloodlight | 6.2 | Nov 1 | Floodlight SDN OpenFlow Controller v.1.2 has an issue that allows local hosts to construct false broadcast ports causing inter-host communication anomalies |
| CVE-2024-29461 | OS Open Sdn Controller Projectfloodlight | 6.3 | Apr 12 | An issue in Floodlight SDN OpenFlow Controller v.1.2 allows a remote attacker to cause a denial of service via the datapath id component |
| CVE-2014-2304 | OS Open Sdn Controller Projectfloodlight | 7.5 | Oct 23 | A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attack and crashing of the controller service |
| CVE-2013-7333 | OS Open Sdn Controller Projectfloodlight | 7.5 | Oct 23 | A vulnerability in version 0.90 of the Open Floodlight SDN controller software could allow an attacker with access to the OpenFlow control network to selectively disconnect… |
| CVE-2018-1000163 | FL Floodlight Projectfloodlight | 6.1 | Apr 18 | Floodlight version 1.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in the web console that can result in javascript injections into the web page |