Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Varnish-cache records in CISA KEVNo Varnish-cache vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 37
An issue was discovered in Varnish Cache before 6.0.6 LTS, 6.1.x and 6.2.x before 6.2.3, and 6.3.x before 6.3.2.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02159 · Published 2020-04-08 · Partial fix CWE-617
Priority LOW 36
An issue was discovered in Varnish Cache before 6.0.5 LTS, 6.1.x and 6.2.x before 6.2.2, and 6.3.x before 6.3.1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0179 · Published 2020-04-08 · Partial fix CWE-212
Priority LOW 32
Varnish Cache, with HTTP/2 enabled, allows request smuggling and VCL authorization bypass via a large Content-Length header for a POST request.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.01599 · Published 2021-07-14 · Fixed CWE-444
