Approved changes feed: RSS · Atom

cpe:2.3:a:projectfloodlight:floodlight:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorProjectfloodlight (1bd1d364-fcc1-5ebd-8113-7bb3a5ae1e7a)
ProductFloodlight (5aa3a25a-3c0d-5cc0-905c-df73c881444c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/pierrecdn/floodlight purl2cpe 2026-06-01 10:12:59.120770
pkg:github/floodlight/floodlight purl2cpe 2026-06-01 10:12:59.120773
pkg:sourceforge/floodlight purl2cpe 2026-06-01 10:12:59.120776

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-45480 vulnerable 2026-09-16 04:25:36.067187 Details available
LOW (3)
Floodlight 71fe8a7 allows disruption of host communication via link spoofing. A port is misclassified as a non-boundary.
Published: 2026-09-13T00:00:00.000Z
Updated: 2026-09-14T18:15:50.920Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000163 vulnerable 2026-06-08 05:10:25.566836 Details available
Floodlight version 1.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in the web console that can result in javascript injections into the web page. This attack appears to be exploitable via the victim browsing the web console.
Published: 2018-04-18T19:00:00.000Z
Updated: 2024-08-05T12:33:49.312Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.