Skip to content
Noroxi

Cloudfoundry records

116 published records for vendor cloudfoundry.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
22.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

116 records
  • CVE-2016-6655
    40Plan

    An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31.

    CriticalCVSS 9.8No exploitEPSS 3%

    cloudfoundry · cf-mysql-releaseJun 13, 2017

  • CVE-2016-0761
    39Monitor

    Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to 1.6.17 contain a flaw in managing container

    CriticalCVSS 9.8No exploitEPSS 2%

    cloudfoundry · garden linuxMay 25, 2017

  • CVE-2016-8218
    39Monitor

    An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231.

    CriticalCVSS 9.8No exploitEPSS 1%

    cloudfoundry · cf-releaseJun 13, 2017

  • CVE-2015-5172
    39Monitor

    Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers

    CriticalCVSS 9.8No exploitEPSS 1%

    cloudfoundry · cf-releaseOct 24, 2017

  • CVE-2017-4992
    39Monitor

    An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x ve

    CriticalCVSS 9.8No exploitEPSS 1%

    cloudfoundry · cf-releaseJun 13, 2017

  • CVE-2015-5171
    39Monitor

    The password change functionality in Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic

    CriticalCVSS 9.8No exploitEPSS 1%

    cloudfoundry · cf-releaseOct 24, 2017

  • CVE-2019-3801
    39Monitor

    Java Projects using HTTP to fetch dependencies

    CriticalCVSS 9.8No exploitEPSS 1%

    cloudfoundry · cf-deploymentApr 25, 2019

  • CVE-2016-6658
    38Monitor

    Applications in cf-release before 245 can be configured and pushed with a user-provided custom buildpack using a URL pointing to the buildpa

    CriticalCVSS 9.6No exploitEPSS 1%

    cloudfoundry · cf-releaseMar 29, 2018

  • CVE-2016-6637
    38Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3

    CriticalCVSS 9.6No exploitEPSS 1%

    cloudfoundry · cloud foundry uaa boshSep 29, 2016

  • CVE-2016-4468
    36Monitor

    SQL injection vulnerability in Pivotal Cloud Foundry (PCF) before 238; UAA 2.x before 2.7.4.4, 3.x before 3.3.0.2, and 3.4.x before 3.4.1; U

    HighCVSS 8.8Proof of conceptEPSS 2%

    cloudfoundry · cloud foundry uaa boshApr 11, 2017

  • CVE-2016-6651
    36Monitor

    The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8, 3.x before 3.3.0.6, and 3.4.x before 3.4.5;

    HighCVSS 8.8No exploitEPSS 2%

    cloudfoundry · cloud foundry uaa boshSep 29, 2016

  • CVE-2018-25046
    36Monitor

    Path traversal in code.cloudfoundry.org/archiver

    CriticalCVSS 9.1No exploitEPSS 1%

    cloudfoundry · archiverDec 27, 2022

  • CVE-2024-37082
    36Monitor

    When deploying Cloud Foundry together with the haproxy-boshrelease and using a non default configuration, it might be possible to craft HTTP

    CriticalCVSS 9.1No exploitEPSS 1%

    cloud foundry · haproxy-boshreleaseJul 3, 2024

  • CVE-2022-31733
    36Monitor

    Starting with diego-release 2.55.0 and up to 2.69.0, and starting with CF Deployment 17.1 and up to 23.2.0, apps are accessible via another

    CriticalCVSS 9.1No exploitEPSS 0%

    cloudfoundry · cf-deploymentFeb 3, 2023

  • CVE-2019-11283
    35Monitor

    Password leak in smbdriver logs

    HighCVSS 8.8No exploitEPSS 1%

    cloudfoundry · cf-deploymentOct 23, 2019

  • CVE-2019-3780
    35Monitor

    Cloud Foundry Container Runtime Leaks IAAS Credentials

    HighCVSS 8.8No exploitEPSS 1%

    cloudfoundry · container runtimeMar 8, 2019

  • CVE-2019-11278
    35Monitor

    Privilege Escalation via Blind SCIM Injection in UAA

    HighCVSS 8.8No exploitEPSS 1%

    cloudfoundry · user account and authenticationSep 26, 2019

  • CVE-2019-11279
    35Monitor

    Privilege Escalation via Scope Manipulation in UAA

    HighCVSS 8.8No exploitEPSS 1%

    cloudfoundry · uaa releaseSep 26, 2019

  • CVE-2019-3781
    35Monitor

    CF CLI does not sanitize user's password in verbose/trace/debug

    HighCVSS 8.8No exploitEPSS 1%

    cloudfoundry · command line interfaceMar 7, 2019

  • CVE-2016-0732
    35Monitor

    The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and 3.0.0; UAA-Release 2 through 4, when config

    HighCVSS 8.8No exploitEPSS 1%

    pivotal · elastic runtimeSep 7, 2017

  • CVE-2017-4973
    35Monitor

    An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x ve

    HighCVSS 8.8No exploitEPSS 1%

    cloudfoundry · cloud foundry uaa boshJun 13, 2017

  • CVE-2015-5173
    35Monitor

    Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers

    HighCVSS 8.8No exploitEPSS 1%

    cloudfoundry · cf-releaseOct 24, 2017

  • CVE-2020-5417
    35Monitor

    Cloud Controller may allow developers to claim sensitive routes

    HighCVSS 8.8No exploitEPSS 1%

    cloudfoundry · capi-releaseAug 21, 2020

  • CVE-2018-1195
    35Monitor

    In Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf-release versions prior to 283, Cloud Controller

    HighCVSS 8.8No exploitEPSS 1%

    cloudfoundry · capi-releaseMar 19, 2018

  • CVE-2018-1191
    35Monitor

    Cloud Foundry Garden-runC, versions prior to 1.11.0, contains an information exposure vulnerability.

    HighCVSS 8.8No exploitEPSS 1%

    cloudfoundry · cf-deploymentMar 29, 2018