Projectfloodlight

9 CVEs across 2 Projectfloodlight products. Browse Projectfloodlight vulnerabilities, severities, and proof-of-concept exploits.

Projectfloodlight products with known CVEs

ProductCVEs
Floodlight5
Open Sdn Controller4
Projectfloodlight CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-45480Low3.02026-09-13Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary.
CVE-2024-57673Medium5.52025-02-06An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module and Linkdiscovery module
CVE-2024-57672Medium5.52025-02-06An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager module, Topologylnstance module, Routing module.
CVE-2024-51407Medium6.22024-11-01Floodlight SDN OpenFlow Controller v.1.2 has an issue that allows local hosts to construct false broadcast ports causing inter-host communication anomalies.
CVE-2024-51406Medium6.22024-11-01Floodlight SDN Open Flow Controller v.1.2 has an issue that allows local hosts to build fake LLDP packets that allow specific clusters to be missed by Floodlig…
CVE-2024-29461Medium6.32024-04-12An issue in Floodlight SDN OpenFlow Controller v.1.2 allows a remote attacker to cause a denial of service via the datapath id component.
CVE-2014-2304High7.52019-10-23A vulnerability in version 0.90 of the Open Floodlight SDN controller software could result in a denial of service attack and crashing of the controller servic…
CVE-2013-7333High7.52019-10-23A vulnerability in version 0.90 of the Open Floodlight SDN controller software could allow an attacker with access to the OpenFlow control network to selective…
CVE-2018-1000163Medium6.12018-04-18Floodlight version 1.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in the web console that can result in javascript injections into the web…