Product by Cloud Foundry

    Capi

    6 known vulnerabilities in Capi (Cloud Foundry), 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Capi (Cloud Foundry)
    HighCVE-2020-5417

    Cloud Controller may allow developers to claim sensitive routes

    also in 3 other products

    8.5
    HighCVE-2020-5423

    Cloud Controller is vulnerable to denial of service via YAML parsing

    also in 3 other products

    7.5
    HighCVE-2019-3785

    Cloud Controller provides signed URL with write authorization to read only user

    also in 1 other product

    6.5
    HighCVE-2020-5400

    Cloud Controller logs environment variables from app manifests

    also in 2 other products

    8.0
    MediumCVE-2019-11294

    CAPI leaks service broker URLs and GUIDs to space developers

    also in 2 other products

    4.3
    MediumCVE-2020-5418

    Cloud Controller allows users with no roles to list droplets

    also in 3 other products

    3.1

    All products by Cloud Foundry