Vulnerabilities

TI-2025-30401 CVE-2025-48017 · GHSA-m57c-xh3v-q656

Improper Limitation of a Pathname to a Restricted Directory

MEDIUM 41

Improper limitation of pathname in Circuit Provisioning and File Import applications allows modification and uploading of files

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00461 Published 2025-05-20 Fixed in 2.16.0 CWE-22

TI-2025-30400 CVE-2025-48016 · GHSA-pw23-46f3-853x

LOW 19

OpenFlow discovery protocol can exhaust resources because it is not rate limited

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00226 Published 2025-05-20 Fixed in 2.16.0 CWE-799

TI-2025-30399 CVE-2025-48015 · GHSA-g4wf-pjgv-xrc5

LOW 17

Failed login response could be different depending on whether the username was local or central.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00266 Published 2025-05-20 Fixed in 2.16.0 CWE-204

TI-2025-30398 CVE-2025-48014 · GHSA-6gpj-qpm5-7xw2

LOW 39

Password guessing limits could be bypassed when using LDAP authentication.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00439 Published 2025-05-20 Fixed in 2.16.0 CWE-307