Known vulnerabilities in Varnish Enterprise

Software CPE: cpe:2.3:a:varnish:varnish_enterprise:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Varnish Enterprise Varnish Enterprise is affected by 7 known vulnerabilities: 7 medium Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124839 - Improper input validation
CWE-20 Medium
No
No
6.0.16r12 02.04.2026 SB2026040259
#VU114024 - Resource exhaustion
CVE-2025-48989
CWE-400 Medium
No
No
6.0.14r5 13.08.2025 SB2025081375
SB2025081376
SB20250820127
and 49 more
#VU109043 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-47905
CWE-444 Medium
No
No
6.0.13r14 13.05.2025 SB2025051363
SB20250521114
SB2025052335
and 11 more
#VU105850 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-30346
CWE-444 Medium
No
No
6.0.13r13 18.03.2025 SB2025031859
SB2025032567
SB2025032630
and 1 more
#VU88221 - Resource exhaustion
CVE-2024-30156
CWE-400 Medium
No
No
6.0.12r6 09.04.2024 SB2024040916
SB2024040925
SB2024040926
and 10 more
#VU79811 - Improper input validation
CWE-20 Medium
No
No
6.0.11r5 22.08.2023 SB2023082201
#VU69128 - Server-Side Request Forgery (SSRF)
CVE-2022-45060
CWE-918 Medium
No
No
6.0.10r3 08.11.2022 SB2022110886
SB2022112827
SB2022112828
and 17 more