CVE-2014-3525: Apache Traffic Server

High severity, CVSS 10.0. EPSS: 4.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in Apache Traffic Server 3.x through 3.2.5, 4.x before 4.2.1.1, and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks.

Affected products

• Apache Traffic Server: version 2.0.0 only; version 2.0.1 only; version 2.1.0 only; version 2.1.1 only; version 2.1.2 only; version 2.1.3 only; …

Published 2014-08-22. Last modified 2026-06-17.