Approved changes feed: RSS · Atom

cpe:2.3:a:varnish-software:varnish_enterprise:6.0.13:r5:*:*:*:*:*:*

part: a version: 6.0.13 update: r5

VendorVarnish Software (65ee8e2c-5e48-53f9-a999-99b2a3b7b4f1)
ProductVarnish Enterprise (569bafee-eb78-580d-83c5-1206057b9781)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-30347 vulnerable 2026-06-08 07:16:59.780080 Details available
MEDIUM (4)
Varnish Enterprise before 6.0.13r13 allows remote attackers to obtain sensitive information via an out-of-bounds read for range requests on ephemeral MSE4 stevedore objects.
Published: 2025-03-21T00:00:00.000Z
Updated: 2025-03-21T15:52:47.427Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30346 vulnerable 2026-06-08 07:16:59.771869 Details available
MEDIUM (5.4)
Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.
Published: 2025-03-21T00:00:00.000Z
Updated: 2025-04-03T13:05:21.274Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.