CVE-2020-18685

PoC —

CVSS 3.1

9.8 critical

EPSS

1%p69

Published

Sep 30, 2021 (Sep 30, 2021)

Modified

Jun 17, 2026

Description

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked prerequisites related to TCP or UDP ports, or group or table IDs.

Vendors: atlassian
Products: floodlight
Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.