cloudfoundry Vulnerability Advisory Catalog

Total 111 security vulnerabilities recorded for cloudfoundry software and firmware.

← Back to All Vendors
Component: cf-release

Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow remote attackers to ...

📅 2017-10-24
CVSS 8.8 Dossier →
Component: cf-release

In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original fix for CVE...

📅 2017-10-04
CVSS 7.8 Dossier →
CVE-2017-8047 MEDIUM
Component: cf-release

In Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all versions prior to v274, in some applications, it is possible...

📅 2017-10-04
CVSS 6.1 Dossier →
Component: cf-release

The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and 3.0.0; UAA-Release 2 through 4, when configured with ...

📅 2017-09-07
CVSS 8.8 Dossier →
CVE-2016-0713 MEDIUM
Component: cf-release

Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors re...

📅 2017-08-31
CVSS 4.7 Dossier →
Component: capi-release

In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf-release versions after v244 and prior to v270, there is an ...

📅 2017-08-21
CVSS 7.5 Dossier →
Component: capi-release

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.35.0 and cf-release...

📅 2017-07-25
CVSS 7.5 Dossier →
Component: capi-release

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions prior to v1.35.0 and cf-release versions prior t...

📅 2017-07-25
CVSS 7.8 Dossier →
Component: capi-release

An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release version 1.33.0 (only). The original fix for CVE-2017-8033...

📅 2017-07-24
CVSS 7.8 Dossier →
CVE-2017-8034 MEDIUM
Component: capi-release

The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0, Routing-release versions prior to v0.159.0, CF-release ...

📅 2017-07-17
CVSS 6.6 Dossier →
Component: cloud_foundry_uaa_bosh

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA release 2.x versions prior to v2.7.4.18, 3.6.x versions pri...

📅 2017-06-13
CVSS 7.5 Dossier →
CVE-2017-4992 CRITICAL
Component: cf-release

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions pri...

📅 2017-06-13
CVSS 9.8 Dossier →
Component: cf-release

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v260; UAA release 2.x versions prior to v2.7.4.16, 3.6.x versions pri...

📅 2017-06-13
CVSS 7.2 Dossier →
CVE-2017-4974 MEDIUM
Component: cf-release

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to v2.7.4.15, 3.6.x versions pri...

📅 2017-06-13
CVSS 6.5 Dossier →
Component: cloud_foundry_uaa_bosh

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions pri...

📅 2017-06-13
CVSS 8.8 Dossier →
Component: cf-release

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions pri...

📅 2017-06-13
CVSS 7.5 Dossier →
CVE-2017-4970 MEDIUM
Component: cf-release

An issue was discovered in Cloud Foundry Foundation cf-release v255 and Staticfile buildpack versions v1.4.0 - v1.4.3. A regression introduced in the ...

📅 2017-06-13
CVSS 5.9 Dossier →
CVE-2016-8219 MEDIUM
Component: capi-release

An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to 1.12.0. A user with the SpaceA...

📅 2017-06-13
CVSS 6.5 Dossier →
CVE-2016-8218 CRITICAL
Component: cf-release

An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validatio...

📅 2017-06-13
CVSS 9.8 Dossier →
CVE-2016-6655 CRITICAL
Component: cf-mysql-release

An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31. A command...

📅 2017-06-13
CVSS 9.8 Dossier →
Component: cloud_foundry_uaa_bosh

The UAA reset password flow in Cloud Foundry release v236 and earlier versions, UAA release v3.3.0 and earlier versions, all versions of Login-server,...

📅 2017-05-25
CVSS 8.1 Dossier →
CVE-2016-2165 MEDIUM
Component: cf-release

The Loggregator Traffic Controller endpoints in cf-release v231 and lower, Pivotal Elastic Runtime versions prior to 1.5.19 AND 1.6.x versions prior t...

📅 2017-05-25
CVSS 6.5 Dossier →
CVE-2016-0781 MEDIUM
Component: cloud_foundry_uaa_bosh

The UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0.0 to v2.7.4.1, UAA v3.0.0 to v3.2.0, UAA-Release v2 t...

📅 2017-05-25
CVSS 6.1 Dossier →
Component: cf-release

It was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x versions prior to 1.5.17 and Pivotal Cloud Foundry Elast...

📅 2017-05-25
CVSS 7.5 Dossier →
Page 4 of 5 (111 Total Records)