CVE-2018-18864: Loadbalancer Enterprise Va Max

Critical severity, CVSS 9.6. EPSS: 2.6% chance of exploitation in the next 30 days.

Loadbalancer.org Enterprise VA MAX before 8.3.3 has XSS because Apache HTTP Server logs are displayed.

Affected products

• Loadbalancer Enterprise Va Max: before 8.3.3 (fixed in 8.3.3)

Published 2018-11-20. Last modified 2026-06-17.