Skip to content
Cloud Foundry vulnerabilities
Newest
-
cloud foundry capi (cloud controller api), cf-deployment +1 more
Broken access control restriction in Cloud Controller API
CVE-2026-59387
8.8 High
-
cloud foundry capi (cloud foundry controller), cf deployment +1 more
Space Developer can extract space-scoped broker credentials
CVE-2026-59385
2.7 Low
-
cloud foundry cf-deployment, cloud foundry foundation capi (cloud foundry controller) +1 more
Cloud Controller exposes secrets in audit log
CVE-2026-59388
6.5 Medium
-
cloud foundry cf-deployment, controller (capi) +1 more
Credential exposure to space supporter
CVE-2026-59386
6.5 Medium
-
cloud foundry uaa, cf-deployment +1 more
DoS Vulnerability in UAA Related to JWKS URI Handling
CVE-2026-59396
6.9 Medium
-
cloud foundry uaa, cf-deployment +1 more
Self-UAA OIDC Configuration allows JWT injection to establish unauthorized sessions
CVE-2026-59357
6.5 Medium
-
cloud foundry uaa, cf-deployment +1 more
UAA OAuth Token Endpoint Vulnerability allows user access token reuse for client_credentials grant type
CVE-2026-59358
Public exploit
7.6 High
-
cloud foundry foundation uaa, cloud foundry cf-deployment +1 more
Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin
CVE-2026-47839
9.2 Critical
-
cloud foundry bosh-vsphere-cpi-release
BOSH vSphere CPI Improper Cert Validation
CVE-2026-41012
7.7 High
-
cloud foundry uaa, cf-deployment +1 more
Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromise
CVE-2026-59335
8.7 High
-
cloud foundry bosh
Arbitrary Root File Write via Path Traversal in BOSH agent
CVE-2026-41861
4.2 Medium
-
cloud foundry cf-deployment, cloudfoundry foundation uaa +1 more
LDAP StartTLS unconditionally disables hostname verification
CVE-2026-47840
8.3 High
-
sensiolabs symfony, cloud foundry routing +1 more
Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization
CVE-2026-48784
Fix available
5.1 Medium
-
cloud foundry cf deployment, uaa +1 more
UAA accepts SAML Encrypted Assertions authentication bypass
CVE-2026-41005
9.0 Critical
-
cloud foundry bosh
PackagePersister.validate_tgz builds "tar -tf #{tgz} 2>&1" where tgz = File.join(release_dir, ...
CVE-2026-41011
8.7 High
-
cloud foundry bosh
A network man-in-the-middle between nats-sync and the BOSH director can steal the director...
CVE-2026-41859
7.1 High
-
cloud foundry bosh
CWE-326 in BOSH allows a local attacker to steal Basic-auth credentials or redirect UAA token...
CVE-2026-41860
7.1 High
-
cloud foundry uua
Cloud Foundry UAA SAML 2.0 Signature Bypass
CVE-2026-22734
8.6 High
-
cloud foundry uaa, cloudfoundry uaa release, cloud foundry cf deployment +1 more +3 more
CVE-2025-22246 – UAA Private Key Exposure
CVE-2025-22246
3.0 Low
-
cloud foundry uaa
CVE-2025-22216 UAA Missing Zone Validation
CVE-2025-22216
5.4 Medium
-
cloud foundry foundry, cloudfoundry cloud foundry +1 more
CVE-2024-38826 Cloud Controller Denial of Service Attack
CVE-2024-38826
5.3 Medium
-
cloud foundry haproxy-boshrelease
Security check loophole in HAProxy release (in combination with routing release) in Cloud Foundry...
CVE-2024-37082
9.1 Critical
-
cloud foundry routing release, cloudfoundry cf-deployment +1 more
GoRouter Denial of Service Attack
CVE-2024-22279
5.9 Medium
-
cloud foundry routing release, pivotal cloud foundry deployment, cloud foundry routing release +1 more +3 more
CVE-2023-34061 – Gorouter route pruning
CVE-2023-34061
7.5 High
-
cloud foundry routing, cf deployment, cloudfoundry cf-deployment +1 more +3 more
CVE-2023-34041-Abuse of HTTP Hop-by-Hop Headers in Cloud Foundry Gorouter
CVE-2023-34041
5.3 Medium
-
cloud foundry cf-nfs-volume release, notifications, smb-volume release +3 more +5 more
CF workflows leak credentials in system audit logs
CVE-2023-20885
6.5 Medium
-
cloud foundry capi, cf deployment, cloudfoundry capi-release +1 more +3 more
Cloud Controller is vulnerable to denial of service via YAML parsing
CVE-2020-5423
7.5 High
-
cloud foundry bosh system metrics server
UAA password may appear in BOSH System Metrics Server process arguments
CVE-2020-5422
6.5 Medium
-
cloud foundry routing, cloudfoundry gorouter, cloud foundry cf deployment +1 more +3 more
Gorouter is vulnerable to DoS attack via invalid HTTP responses
CVE-2020-5420
7.7 High
-
cloud foundry capi, cf deployment, cloudfoundry capi-release +1 more +3 more
Cloud Controller allows users with no roles to list droplets
CVE-2020-5418
3.1 Low
-
cloud foundry capi, cf deployment, cloudfoundry capi-release +1 more +3 more
Cloud Controller may allow developers to claim sensitive routes
CVE-2020-5417
8.5 High
-
cloud foundry routing, cf deployment, cloudfoundry cf-deployment +1 more +3 more
CF clusters with NGINX in front of them may be vulnerable to DoS
CVE-2020-5416
7.7 High
-
cloud foundry uaa, cloudfoundry cf-deployment, user account and authentication +2 more
UAA fails to check the state parameter when authenticating with external IDPs
CVE-2020-5402
8.8 High
-
cloud foundry routing, cloudfoundry routing release +1 more
Cloud Foundry GoRouter is vulnerable to cache poisoning
CVE-2020-5401
5.3 Medium
-
cloud foundry capi, cloudfoundry capi-release, cf-deployment +2 more
Cloud Controller logs environment variables from app manifests
CVE-2020-5400
8.0 High
-
cloud foundry credhub, pivotal software cloud foundry cf-deployment +1 more
CredHub does not properly enable TLS for MySQL database connections
CVE-2020-5399
7.6 High
-
cloud foundry capi, cloudfoundry capi-release, cf-deployment +2 more
CAPI leaks service broker URLs and GUIDs to space developers
CVE-2019-11294
4.3 Medium
-
cloud foundry uaa release, cloudfoundry cf-deployment, user account and authentication +2 more
UAA logs all query parameters with debug logging level
CVE-2019-11293
8.8 High
-
cloud foundry uaa release, cloudfoundry cf-deployment, user account and authentication +2 more
Cloud Foundry UAA logs query parameters in tomcat access file
CVE-2019-11290
8.8 High
-
cloud foundry routing, cloudfoundry cf-deployment, routing-release +2 more
A forged route service request using an invalid nonce can cause the gorouter to panic and crash
CVE-2019-11289
Fix available
8.6 High
-
cloud foundry smb volume, pivotal software cloud foundry smb volume, cloud foundry cf deployment +1 more +3 more
Password leak in smbdriver logs
CVE-2019-11283
8.8 High
-
pivotal software cloud foundry uaa, cloud foundry cf deployment, uaa release +1 more +3 more
UAA is vulnerable to a Blind SCIM injection leading to information disclosure
CVE-2019-11282
4.3 Medium
-
cloud foundry uaa release (oss), cloudfoundry uaa release +1 more
Privilege Escalation via Scope Manipulation in UAA
CVE-2019-11279
8.7 High
-
cloud foundry uaa release (oss), cloudfoundry user account and authentication +1 more
Privilege Escalation via Blind SCIM Injection in UAA
CVE-2019-11278
8.7 High
-
cloud foundry cf deployment, cf nfs volume release, cloudfoundry cf-deployment +1 more +3 more
Volume Services is vulnerable to an LDAP injection attack
CVE-2019-11277
8.4 High
-
cloud foundry uaa release (oss), cloudfoundry user account and authentication +1 more
UAA SCIM Filter XSS
CVE-2019-11274
4.3 Medium
-
cloud foundry cf cli, anynines elasticsearch, logme +45 more +47 more
CF CLI writes the client id and secret to config file
CVE-2019-3800
6.3 Medium
-
pivotal software cloud foundry uaa, cloud foundry uaa release (oss), pivotal software application service +1 more +3 more
UAA clients.write vulnerability
CVE-2019-11270
7.3 High
-
pivotal software cloud foundry uaa, cloud foundry uaa release (oss) +1 more
UAA - Login app subject to clickjacking attack
CVE-2019-3794
6.5 Medium
-
cloud foundry uaa release (oss), pivotal software cloud foundry uaa-release +1 more
UAA SQL Identity Zone Vulnerability
CVE-2019-11268
6.5 Medium
- Show olderLoading…