Vendor

    Cloud Foundry

    115 known vulnerabilities in products by Cloud Foundry, 0 of them actively exploited (CISA KEV).

    Key figures

    115

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    13

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Cloud Foundry
    CriticalCVE-2016-6655

    Cloud Foundry: Command Injection

    		9.8
    HighCVE-2016-4468

    Pivotal Software Cloud Foundry: SQL Injection

    also in 4 other products

    		8.8
    CriticalCVE-2016-0761

    Pivotal Cloud Foundry: security vulnerability

    also in 2 other products

    		9.8
    HighCVE-2016-6651

    Pivotal Software Cloud Foundry: Privilege Escalation

    also in 4 other products

    		8.8
    MediumCVE-2020-15586

    Go: security vulnerability

    also in 5 other products

    		5.9
    HighCVE-2019-11277

    Volume Services is vulnerable to an LDAP injection attack

    also in 1 other product

    		8.4
    CriticalCVE-2016-8218

    Cloud Foundry: security vulnerability

    		9.8
    CriticalCVE-2019-3780

    Cloud Foundry Container Runtime Leaks IAAS Credentials

    also in 1 other product

    		9.1
    HighCVE-2019-11289

    A forged route service request using an invalid nonce can cause the gorouter to panic and crash

    also in 2 other products

    		8.6
    HighCVE-2019-11283

    Password leak in smbdriver logs

    also in 2 other products

    		8.8
    CriticalCVE-2018-25046

    Path traversal in code.cloudfoundry.org/archiver

    also in 1 other product

    		9.1
    HighCVE-2016-6639

    Cloud Foundry Php-buildpack: Information Disclosure

    also in 1 other product

    		7.5
    CriticalCVE-2015-5171

    Cloud Foundry cf-release: security vulnerability

    also in 2 other products

    		9.8
    CriticalCVE-2015-5172

    Cloud Foundry cf-release: security vulnerability

    also in 2 other products

    		9.8
    CriticalCVE-2017-4992

    Cloud Foundry: Privilege Escalation

    also in 1 other product

    		9.8
    HighCVE-2016-9882

    Cloud Foundry CAPI: security vulnerability

    		7.5
    HighCVE-2018-1265

    Cloud Foundry Diego: security vulnerability

    also in 2 other products

    		7.2
    HighCVE-2019-11278

    Privilege Escalation via Blind SCIM Injection in UAA

    also in 1 other product

    		8.7
    HighCVE-2019-11293

    UAA logs all query parameters with debug logging level

    also in 1 other product

    		8.8
    HighCVE-2019-11279

    Privilege Escalation via Scope Manipulation in UAA

    also in 1 other product

    		8.7
    HighCVE-2019-11290

    Cloud Foundry UAA logs query parameters in tomcat access file

    also in 1 other product

    		8.8
    HighCVE-2017-4960

    Pivotal Software Cloud Foundry: Denial of Service

    also in 2 other products

    		7.5
    CriticalCVE-2026-47826

    blobs.yaml Path Traversal Allows File Writes

    also in 1 other product

    		9.1
    HighCVE-2017-8036

    Cloud Controller API CAPI-release version 1.33.0 only: Code Execution

    		7.8
    HighCVE-2019-3781

    CF CLI does not sanitize user's password in verbose/trace/debug

    also in 1 other product

    		8.2

    All vulnerabilities in search

    News

    Products

    Products by Cloud Foundry
    Cloud Foundry CF-Deployment370
    Cloud Foundry cf-release350
    Cloud Controller API CAPI-release version 1.33.0 only220
    Cloud Foundry Uaa Bosh150
    Cloud Foundry routing-release130
    Cloud Foundry UAA Release (OSS)90
    Cloud Foundry UAA Release (OSS)80
    BOSH CLI40