CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-25763

Improper Input Validation vulnerability in HTTP/2 request validation of Apache Traffic Server allows an attacker to create smuggle or cache poison attacks. This issue affects Apache Traffic Server 8.0.0 to 9.1.2.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 46.0%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2022-25763

Apache » Traffic Server » Version: 8.0.0

cpe:2.3:a:apache:traffic_server:8.0.0
Apache » Traffic Server » Version: 8.0.1

cpe:2.3:a:apache:traffic_server:8.0.1
Apache » Traffic Server » Version: 8.0.2

cpe:2.3:a:apache:traffic_server:8.0.2
Apache » Traffic Server » Version: 8.0.3

cpe:2.3:a:apache:traffic_server:8.0.3
Apache » Traffic Server » Version: 8.0.4

cpe:2.3:a:apache:traffic_server:8.0.4
Apache » Traffic Server » Version: 8.0.5

cpe:2.3:a:apache:traffic_server:8.0.5
Apache » Traffic Server » Version: 8.0.6

cpe:2.3:a:apache:traffic_server:8.0.6
Apache » Traffic Server » Version: 8.0.7

cpe:2.3:a:apache:traffic_server:8.0.7
Apache » Traffic Server » Version: 8.0.8

cpe:2.3:a:apache:traffic_server:8.0.8
Apache » Traffic Server » Version: 8.1.0

cpe:2.3:a:apache:traffic_server:8.1.0
Apache » Traffic Server » Version: 8.1.1

cpe:2.3:a:apache:traffic_server:8.1.1
Apache » Traffic Server » Version: 8.1.2

cpe:2.3:a:apache:traffic_server:8.1.2
Apache » Traffic Server » Version: 8.1.3

cpe:2.3:a:apache:traffic_server:8.1.3
Apache » Traffic Server » Version: 8.1.4

cpe:2.3:a:apache:traffic_server:8.1.4
Apache » Traffic Server » Version: 9.0.0

cpe:2.3:a:apache:traffic_server:9.0.0
Apache » Traffic Server » Version: 9.0.1

cpe:2.3:a:apache:traffic_server:9.0.1
Apache » Traffic Server » Version: 9.0.2

cpe:2.3:a:apache:traffic_server:9.0.2
Apache » Traffic Server » Version: 9.1.0

cpe:2.3:a:apache:traffic_server:9.1.0
Apache » Traffic Server » Version: 9.1.1

cpe:2.3:a:apache:traffic_server:9.1.1
Apache » Traffic Server » Version: 9.1.2

cpe:2.3:a:apache:traffic_server:9.1.2
Debian » Debian Linux » Version: 11.0

cpe:2.3:o:debian:debian_linux:11.0
Fedoraproject » Fedora » Version: 35

cpe:2.3:o:fedoraproject:fedora:35
Fedoraproject » Fedora » Version: 36

cpe:2.3:o:fedoraproject:fedora:36

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-25763

Products

Pricing

Contact Us