Product by Varnish Cache Project

Varnish Cache

14 known vulnerabilities in Varnish Cache (Varnish Cache Project), 1 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Varnish Cache (Varnish Cache Project)

Critical	CVE-2023-44487	HTTP/2 Rapid Reset Attack Vulnerability In CISA KEValso in 160 other products	7.5	10.10.2023
Critical	CVE-2017-8807	Varnish: Information Disclosure also in 2 other products	9.1	16.11.2017
High	CVE-2019-15892	Varnish Cache: Denial of Service also in 2 other products	7.5	03.09.2019
High	CVE-2015-8852	Varnish Cache: security vulnerability also in 1 other product	7.5	25.04.2016
Critical	CVE-2022-23959	Varnish Cache: security vulnerability also in 4 other products	9.1	26.01.2022
High	CVE-2017-12425	Varnish: Integer Overflow also in 2 other products	7.5	04.08.2017
High	CVE-2022-45059	Varnish Cache: security vulnerability also in 1 other product	7.5	09.11.2022
High	CVE-2022-38150	Varnish Cache: security vulnerability also in 1 other product	7.5	11.08.2022
Medium	CVE-2021-36740	Varnish Cache: security vulnerability also in 5 other products	6.5	14.07.2021
High	CVE-2013-4090	Varnish Cache: security vulnerability	7.5	12.02.2020
High	CVE-2022-45060	Varnish Cache: security vulnerability also in 4 other products	7.5	09.11.2022
Not rated	CVE-2013-4484	Varnish: Denial of Service also in 1 other product	—	01.11.2013
Medium	CVE-2025-30346	Varnish-Software Varnish Cache: HTTP Request/Response Smuggling also in 4 other products	5.4	21.03.2025
Not rated	CVE-2013-0345	Varnish Cache: Information Disclosure	—	08.05.2014