What’s Vulnerable › Products

Apache Software Foundation Apache Traffic Control vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Apache Software Foundation Apache Traffic Control version is affected

Latest Apache Software Foundation Apache Traffic Control vulnerabilities

• CVE-2025-61581 — Apache Traffic Control: ReDoS issue in Traffic Router configuration (CVSS 7.5)
• CVE-2024-45387 — Apache Traffic Control: SQL Injection in Traffic Ops endpoint PUT deliveryservice_request_comments (CVSS 8.8)
• CVE-2022-23206 — Server-Side Request Forgery in Traffic Ops endpoint POST /user/login/oauth (CVSS 7.5)
• CVE-2021-43350 — LDAP filter injection vulnerability in Traffic Ops (CVSS 9.8)
• CVE-2021-42009 — Apache Traffic Control Traffic Ops Email Injection Vulnerability (CVSS 4.3)
• CVE-2020-17522 — (CVSS 5.8)
• CVE-2019-12405 — (CVSS 9.8)
• CVE-2017-7670 — (CVSS 7.5)