Cloudfoundry Cloud Foundry vulnerabilities

• cloudfoundry cloud foundry Cloud Foundry unprotected internal endpoints CVE-2026-22727 7.5 HighMarch 17, 2026
• cloud foundry foundry, cloudfoundry cloud foundry +1 more CVE-2024-38826 Cloud Controller Denial of Service Attack CVE-2024-38826 5.3 MediumNovember 11, 2024
• cloudfoundry cloud foundry, user account and authentication +1 more This disclosure regards a vulnerability related to UAA refresh tokens and external identity... CVE-2023-20903 4.3 MediumMarch 28, 2023
• cloud foundry foundry, cloudfoundry cloud foundry, java buildpack +1 more +3 more Applications deployed to Cloud Foundry, versions v166 through v227, may be vulnerable to a remote... CVE-2016-0708 5.9 MediumJuly 11, 2018
• cloudfoundry capi-release, cf-release, cloud foundry +2 more In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf... CVE-2017-8037 7.5 HighAugust 21, 2017
• cloudfoundry capi-release, cf-release, cloud foundry +1 more +3 more The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0,... CVE-2017-8034 6.6 MediumJuly 17, 2017
• cloudfoundry cloud foundry, pivotal software cloud foundry cf, cloud foundry uaa +1 more +3 more Cloud Foundry UAA Identity Zone Admin Privilege Escalation CVE-2017-8032 Fix available 6.6 MediumJuly 10, 2017
• cloudfoundry cloud foundry, cloud foundry uaa bosh, pivotal software cloud foundry cf +1 more +3 more An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA... CVE-2017-4994 7.5 HighJune 13, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry uaa +1 more +3 more Cloud Foundry UAA privilege escalation with user invitations CVE-2017-4992 Fix available 9.8 CriticalJune 13, 2017
• cloudfoundry cf-release, cloud foundry, staticfile buildpack +2 more An issue was discovered in Cloud Foundry Foundation cf-release v255 and Staticfile buildpack... CVE-2017-4970 5.9 MediumJune 13, 2017
• cloudfoundry capi-release, cf-release, cloud foundry +2 more An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI... CVE-2016-8219 6.5 MediumJune 13, 2017
• cloudfoundry cf-release, cloud foundry, routing-release +2 more An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and... CVE-2016-8218 9.8 CriticalJune 13, 2017
• cloudfoundry cf-mysql-release, cloud foundry, cf-release +2 more An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245... CVE-2016-6655 9.8 CriticalJune 13, 2017
• cloudfoundry cloud foundry, pivotal bosh stemcell +1 more An endpoint of the Agent running on the BOSH Director VM with stemcell versions prior to 3232.6... CVE-2016-4435 9.0 CriticalMay 25, 2017
• cloudfoundry cloud foundry, pivotal software cloud foundry uaa, login-server +2 more +4 more Cloud Foundry UAA reset password vulnerable to brute force attack CVE-2016-3084 Fix available 8.1 HighMay 25, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +2 more The Loggregator Traffic Controller endpoints in cf-release v231 and lower, Pivotal Elastic... CVE-2016-2165 6.5 MediumMay 25, 2017
• cloudfoundry cloud foundry, pivotal software login-server, cloudfoundry cloud foundry uaa bosh +2 more +4 more The UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0... CVE-2016-0781 6.1 MediumMay 25, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +2 more It was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x... CVE-2016-0780 7.5 HighMay 25, 2017
• cloudfoundry cloud foundry, garden linux, pivotal software cloud foundry elastic runtime +2 more Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to... CVE-2016-0761 9.8 CriticalMay 25, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 more With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or... CVE-2015-3191 8.8 HighMay 25, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 more With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or... CVE-2015-3190 6.1 MediumMay 25, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 more Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password CVE-2015-3189 Fix available 3.7 LowMay 25, 2017
• cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +2 more A path traversal vulnerability was identified in the Cloud Foundry component Cloud Controller... CVE-2015-1834 6.5 MediumMay 25, 2017