Atlassian Floodlight — known CVE vulnerabilities

Every CVE whose affected-product data names Atlassian Floodlight, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2020-18683 — CVSS 9.8 (critical): Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of undefined fields mishandling.
• CVE-2020-18684 — CVSS 9.8 (critical): Floodlight through 1.2 has an integer overflow in checkFlow in StaticFlowEntryPusherResource.java via priority or port number.
• CVE-2020-18685 — CVSS 9.8 (critical): Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked prerequisites…
• CVE-2015-6569 — CVSS 5.9 (medium): Race condition in the LoadBalancer module in the Atlassian Floodlight Controller before 1.2 allows remote attackers to cause a denial of…