İçeriğe atla
Noroxi

Cloudfoundry kayıtları

cloudfoundry üreticisine ait 116 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%22,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

116 kayıt
  • CVE-2016-6655
    40Planlayın

    An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31.

    KritikCVSS 9,8İstismar yokEPSS %3

    cloudfoundry · cf-mysql-release13 Haz 2017

  • CVE-2016-0761
    39İzleyin

    Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to 1.6.17 contain a flaw in managing container

    KritikCVSS 9,8İstismar yokEPSS %2

    cloudfoundry · garden linux25 May 2017

  • CVE-2016-8218
    39İzleyin

    An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231.

    KritikCVSS 9,8İstismar yokEPSS %1

    cloudfoundry · cf-release13 Haz 2017

  • CVE-2015-5172
    39İzleyin

    Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers

    KritikCVSS 9,8İstismar yokEPSS %1

    cloudfoundry · cf-release24 Eki 2017

  • CVE-2017-4992
    39İzleyin

    An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x ve

    KritikCVSS 9,8İstismar yokEPSS %1

    cloudfoundry · cf-release13 Haz 2017

  • CVE-2015-5171
    39İzleyin

    The password change functionality in Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic

    KritikCVSS 9,8İstismar yokEPSS %1

    cloudfoundry · cf-release24 Eki 2017

  • CVE-2019-3801
    39İzleyin

    Java Projects using HTTP to fetch dependencies

    KritikCVSS 9,8İstismar yokEPSS %1

    cloudfoundry · cf-deployment25 Nis 2019

  • CVE-2016-6658
    38İzleyin

    Applications in cf-release before 245 can be configured and pushed with a user-provided custom buildpack using a URL pointing to the buildpa

    KritikCVSS 9,6İstismar yokEPSS %1

    cloudfoundry · cf-release29 Mar 2018

  • CVE-2016-6637
    38İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3

    KritikCVSS 9,6İstismar yokEPSS %1

    cloudfoundry · cloud foundry uaa bosh29 Eyl 2016

  • CVE-2016-4468
    36İzleyin

    SQL injection vulnerability in Pivotal Cloud Foundry (PCF) before 238; UAA 2.x before 2.7.4.4, 3.x before 3.3.0.2, and 3.4.x before 3.4.1; U

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    cloudfoundry · cloud foundry uaa bosh11 Nis 2017

  • CVE-2016-6651
    36İzleyin

    The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8, 3.x before 3.3.0.6, and 3.4.x before 3.4.5;

    YüksekCVSS 8,8İstismar yokEPSS %2

    cloudfoundry · cloud foundry uaa bosh29 Eyl 2016

  • CVE-2018-25046
    36İzleyin

    Path traversal in code.cloudfoundry.org/archiver

    KritikCVSS 9,1İstismar yokEPSS %1

    cloudfoundry · archiver27 Ara 2022

  • CVE-2024-37082
    36İzleyin

    When deploying Cloud Foundry together with the haproxy-boshrelease and using a non default configuration, it might be possible to craft HTTP

    KritikCVSS 9,1İstismar yokEPSS %1

    cloud foundry · haproxy-boshrelease3 Tem 2024

  • CVE-2022-31733
    36İzleyin

    Starting with diego-release 2.55.0 and up to 2.69.0, and starting with CF Deployment 17.1 and up to 23.2.0, apps are accessible via another

    KritikCVSS 9,1İstismar yokEPSS %0

    cloudfoundry · cf-deployment3 Şub 2023

  • CVE-2019-11283
    35İzleyin

    Password leak in smbdriver logs

    YüksekCVSS 8,8İstismar yokEPSS %1

    cloudfoundry · cf-deployment23 Eki 2019

  • CVE-2019-3780
    35İzleyin

    Cloud Foundry Container Runtime Leaks IAAS Credentials

    YüksekCVSS 8,8İstismar yokEPSS %1

    cloudfoundry · container runtime8 Mar 2019

  • CVE-2019-11278
    35İzleyin

    Privilege Escalation via Blind SCIM Injection in UAA

    YüksekCVSS 8,8İstismar yokEPSS %1

    cloudfoundry · user account and authentication26 Eyl 2019

  • CVE-2019-11279
    35İzleyin

    Privilege Escalation via Scope Manipulation in UAA

    YüksekCVSS 8,8İstismar yokEPSS %1

    cloudfoundry · uaa release26 Eyl 2019

  • CVE-2019-3781
    35İzleyin

    CF CLI does not sanitize user's password in verbose/trace/debug

    YüksekCVSS 8,8İstismar yokEPSS %1

    cloudfoundry · command line interface7 Mar 2019

  • CVE-2016-0732
    35İzleyin

    The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and 3.0.0; UAA-Release 2 through 4, when config

    YüksekCVSS 8,8İstismar yokEPSS %1

    pivotal · elastic runtime7 Eyl 2017

  • CVE-2017-4973
    35İzleyin

    An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x ve

    YüksekCVSS 8,8İstismar yokEPSS %1

    cloudfoundry · cloud foundry uaa bosh13 Haz 2017

  • CVE-2015-5173
    35İzleyin

    Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers

    YüksekCVSS 8,8İstismar yokEPSS %1

    cloudfoundry · cf-release24 Eki 2017

  • CVE-2020-5417
    35İzleyin

    Cloud Controller may allow developers to claim sensitive routes

    YüksekCVSS 8,8İstismar yokEPSS %1

    cloudfoundry · capi-release21 Ağu 2020

  • CVE-2018-1195
    35İzleyin

    In Cloud Controller versions prior to 1.46.0, cf-deployment versions prior to 1.3.0, and cf-release versions prior to 283, Cloud Controller

    YüksekCVSS 8,8İstismar yokEPSS %1

    cloudfoundry · capi-release19 Mar 2018

  • CVE-2018-1191
    35İzleyin

    Cloud Foundry Garden-runC, versions prior to 1.11.0, contains an information exposure vulnerability.

    YüksekCVSS 8,8İstismar yokEPSS %1

    cloudfoundry · cf-deployment29 Mar 2018