Projectfloodlight Floodlight — known CVE vulnerabilities

Every CVE whose affected-product data names Projectfloodlight Floodlight, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2024-51407 — CVSS 6.2 (medium): Floodlight SDN OpenFlow Controller v.1.2 has an issue that allows local hosts to construct false broadcast ports causing inter-host…
• CVE-2018-1000163 — CVSS 6.1 (medium): Floodlight version 1.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in the web console that can result in javascript…
• CVE-2024-57672 — CVSS 5.5 (medium): An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module, Topologylnstance module…
• CVE-2024-57673 — CVSS 5.5 (medium): An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module and Linkdiscovery module