Traffic Server

DATE	CVE	VULNERABILITY TITLE	RISK
2017-10-30	CVE-2014-3624	Improper Access Control vulnerability in Apache Traffic Server 5.1.0 Apache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by leveraging failure to properly tunnel remap requests using CONNECT. network low complexity apache CWE-284 critical	9.8
2017-09-13	CVE-2015-5206	Unspecified vulnerability in Apache Traffic Server 5.3.0/5.3.1 Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5168. network low complexity apache critical	9.8
2017-09-13	CVE-2015-5168	Unspecified vulnerability in Apache Traffic Server 5.3.0/5.3.1 Unspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2015-5206. network low complexity apache critical	9.8
2017-04-17	CVE-2017-5659	Improper Input Validation vulnerability in Apache Traffic Server Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding. network low complexity apache CWE-20	7.5
2017-04-17	CVE-2016-5396	Resource Management Errors vulnerability in Apache Traffic Server Apache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack. network low complexity apache CWE-399	7.5