Apache Vcl (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-03-25. Vendor: Apache Software Foundation.

CVEs of Apache Vcl

• CVE-2024-53679 - CVSS 8.4 (high), 2025-03-25: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache VCL in the User Lookup form. A user with…
• CVE-2024-53678 - CVSS 8.8 (high), 2025-03-25: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache VCL. Users can modify form data submitted when…