CVE-2024-57672

An issue in floodlight v1.2 allows a local attacker to trigger a denial of service (DoS) through the Topology Manager , TopologyInstance , and Routing modules. This vulnerability is associated with CWE-400 (Uncontrolled Resource Consumption) . As a temporary workaround, users are advised to disab...

CVE-2024-57673

The Floodlight open source OpenFlow controller (v1.2) is vulnerable to a denial of service (DoS) attack. A local attacker can trigger this condition by exploiting the Topology Manager and Linkdiscovery modules, leading to uncontrolled resource consumption (CWE-400). As a temporary workaround, it ...

CVE-2024-51407

The Floodlight SDN OpenFlow Controller v.1.2 is vulnerable to an issue that allows local hosts to construct false broadcast ports . This flaw can lead to inter-host communication anomalies . As a mitigation, it is recommended to restrict local host access to the OpenFlow Controller until a patch ...

CVE-2018-1000163

Floodlight web console contains a Cross Site Scripting (XSS) flaw in version 1.2 and earlier. The vulnerability allows JavaScript injections when a victim browses the web console. Connected sources corroborate the XSS description but do not provide concrete exploit details, affected file paths, o...