Intel

CVE-2025-22246

Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs. (CVE-2025-22246)

lowEPSS 0.2%

Description

Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs.

Source: CVELISTV5CVEORGNVD

Metrics

Severity
low
Priority score
30.30
KEV status
—
Exploit maturity
no public PoC known
XIEM Effective CVSS
3.0
Source: nvd-v3
CVSS v3
3.0
CVSS v4
—
EPSS percentile
9.4 %
Low — this CVE sits in the lower 10% of all CVEs scored today.
EPSS score
0.2 %
Low — model estimates < 1% exploitation likelihood.
Published
2025-05-13 05:14 UTC
CWE
—

Affected products

Products and version ranges extracted from the vendor/CERT advisory. A range like „<4.14.6“ implies the update recommendation „upgrade to 4.14.6 or later“.

  • cloudfoundry

    cf-deployment45.1.0 – 49.0.0

  • cloudfoundry

    uaa_release77.21.0 – 77.32.0

References & sources

IDCVE-2025-22246