Opendaylight (Linuxfoundation) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2024-05-31. Vendor: Linuxfoundation.

CVEs of Opendaylight

• CVE-2024-37018 - CVSS 9.1 (critical), 2024-05-31: The OpenDaylight 0.15.3 controller allows topology poisoning via API requests because an application can manipulate the path that is taken by discovery packets.
• CVE-2022-45932 - CVSS 7.5 (high), 2022-11-27: A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The…
• CVE-2022-45931 - CVSS 7.5 (high), 2022-11-27: A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The…
• CVE-2022-45930 - CVSS 7.5 (high), 2022-11-27: A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The…
• CVE-2015-1857 - CVSS 5.3 (medium), 2018-04-27: The odl-mdsal-apidocs feature in OpenDaylight Helium allow remote attackers to obtain sensitive information by leveraging missing AAA restrictions.