PT-2025-5862 · Unknown · Floodlight

Name of the Vulnerable Software and Affected Versions: Floodlight version 1.2 Description: An issue in Floodlight allows a local attacker to cause a denial of service via the Topology Manager module and Linkdiscovery module. Recommendations: For Floodlight version 1.2, as a temporary workaround,...

CVE-2018-1000163

Floodlight version 1.2 and earlier contains a Cross Site Scripting XSS vulnerability in the web console that can result in javascript injections into the web page. This attack appears to be exploitable via the victim browsing the web console...