Read the docs

Cloudflare

Records70All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high44CVSS 7.0–8.9

Exploited now

Cloudflare records in CISA KEV

No Cloudflare vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Warp 16 records MEDIUM Octorpki 9 records MEDIUM Quiche 7 records MEDIUM Pingora 4 records MEDIUM Wrangler 4 records LOW Warp Mobile Client 3 records LOW Circl 2 records LOW Cloudflared 2 records LOW

Records

3 records in Warp Mobile Client · all components

TI-2022-03084 CVE-2022-3337

Lock WARP switch bypass by removing VPN profile on iOS mobile client

Priority LOW 37

It was possible for a user to delete a VPN profile from WARP mobile client on iOS platform despite the Lock WARP switch https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/warp-settings/#loc…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00432 Published 2022-10-28 Fixed in 6.15 CWE-862
TI-2022-03069 CVE-2022-3321

Lock WARP switch feature bypass on WARP mobile client for iOS

Priority LOW 36

It was possible to bypass Lock WARP switch feature https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/warp-settings/#lock-warp-switch on the WARP iOS mobile client by enabling both "Disable…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00432 Published 2022-10-28 Fixed in 6.14 CWE-862
Open these records in search →