Cloud Foundry vulnerabilities

Products

• Bosh 5

Newest

• cloud foundry foundation bosh director, cloud foundry bosh +1 more Compromised VM can make arbitrary blobstore deletes CVE-2026-41704 6.8 MediumMay 27, 2026
• cloud foundry foundation bosh director, cloud foundry bosh +1 more Local Blobstore may allow arbitrary reads/deletes CVE-2026-41009 4.3 MediumMay 27, 2026
• cloud foundry bosh system metrics server UAA password may appear in BOSH System Metrics Server process arguments CVE-2020-5422 6.5 MediumOctober 2, 2020
• cloud foundry bosh Bosh Deployment logs leak sensitive information CVE-2019-11271 6.0 MediumJune 18, 2019
• cloud foundry bits service, bits service release +1 more Timing attack allows extraction of signing key in Bits Service CVE-2018-15800 8.1 HighDecember 10, 2018
• cloud foundry cf networking release, cf-networking +1 more CF networking internal policy server SQL injection CVE-2018-15755 6.6 MediumOctober 12, 2018
• cloud foundry bosh Bosh accepts refresh tokens in place of an access token CVE-2018-11083 8.4 HighOctober 5, 2018
• cloud foundry bosh An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3... CVE-2017-4961 8.8 HighJune 13, 2017
• cloud foundry diego Cloud Foundry Diego 0.1468.0 through 0.1470.0 allows remote attackers to cause a denial of service. CVE-2016-3091 7.5 HighJune 8, 2017