CVE-2020-18685

9.8 criticalEPSS 1.3%

Critical (9.8) in atlassian floodlight. EPSS 1.3% chance of exploitation in the next 30 days.

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked prerequisites related to TCP or UDP ports, or group or table IDs.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2021-09-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

atlassian:floodlight

References

https://drive.google.com/open?id=1oIt6jViGxLALUkLVELsQpC26MJYFZt2U
https://drive.google.com/open?id=1oIt6jViGxLALUkLVELsQpC26MJYFZt2U

Check your stack JSON