Vulnerabilities (CVE)

Filtered by vendor Atlassian Subscribe
Filtered by product Floodlight
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-18684 1 Atlassian 1 Floodlight 2021-10-07 7.5 HIGH 9.8 CRITICAL
Floodlight through 1.2 has an integer overflow in checkFlow in StaticFlowEntryPusherResource.java via priority or port number.
CVE-2020-18683 1 Atlassian 1 Floodlight 2021-10-03 7.5 HIGH 9.8 CRITICAL
Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of undefined fields mishandling.
CVE-2020-18685 1 Atlassian 1 Floodlight 2021-10-03 7.5 HIGH 9.8 CRITICAL
Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked prerequisites related to TCP or UDP ports, or group or table IDs.