Vendors / varnish-software Records 18 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 10
Exploited now varnish-software records in CISA KEV No varnish-software vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x before 4.1.11r6 and 6.0.x before 6.0.9r4, request smuggling can occur for HTTP/1 conn…
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02011 · Published 2022-01-26 · Fixed CWE-444
Priority MEDIUM 41
An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01296 · Published 2022-11-09 · Fixed CWE-20
Open these records in search → All records by CVSS severity
2 10 4 2 0
