varnish cache project varnish cache

Name: varnish cache project varnish cache
Brand: varnish cache project

productUS

cpe:2.3:a:varnish_cache_project:varnish_cache:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical8high3medium1low

updated 2026-10-28

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-44487US	high7.5OT critical	100.0% (100th)	KEV	2023-10-10	2023-10-10	< 2023-10-10
CVE-2022-45059US	high7.5	1.52% (75th)	Exploit	7.1.2	2022-11-09	2 versions
CVE-2019-15892US	high7.5	5.90% (93rd)	—	6.2.1	2019-09-03	2 versions
CVE-2017-8807US	critical9.1	4.08% (91st)	—	5.2.1	2017-11-16	5.0.0 → 5.2.1
CVE-2015-8852US	high7.5	3.52% (89th)	—	no fix	2016-04-25	7 versions
CVE-2013-4484US	medium5.0	3.24% (88th)	—	no fix	2013-11-01	17 versions
CVE-2017-12425US	high7.5	2.42% (84th)	—	no fix	2017-08-04	8 versions
CVE-2022-23959US	critical9.1	2.01% (81st)	—	7.0.2	2022-01-26	7.0.0 → 7.0.2
CVE-2021-36740US	medium6.5	1.60% (76th)	—	no fix	2021-07-14	2 versions
CVE-2022-38150US	high7.5	1.42% (73rd)	—	no fix	2022-08-11	4 versions
CVE-2013-4090US	high7.5	1.27% (70th)	—	3.0.4	2020-02-12	< 3.0.4
CVE-2022-45060US	high7.5	1.04% (64th)	—	7.1.2	2022-11-09	3 versions
CVE-2013-0345US	low2.1	0.37% (31st)	—	no fix	2014-05-08	= 3.0.3
CVE-2025-30346US	medium4.8	0.31% (24th)	—	7.6.2	2025-03-21	< 7.6.2

The flaw types (CWEs) most of these CVEs share.

CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-264CWE-2641 CVEs
CWE-617Reachable Assertion1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.