BO
Product
Bosh
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 2Low 0
Watch
Add Bosh to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-4961 | 8.8 | Jun 13 | An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions Affected: 260; 260.1; 260.2; 260.3; 260.4; 260.5; +5 more |
| CVE-2018-11083 | 8.1 | Oct 5 | Cloud Foundry BOSH, versions v264 prior to v264.14.0 and v265 prior to v265.7.0 and v266 prior to v266.8.0 and v267 prior to v267.2.0, allows refresh tokens to be as access tokens… Affected: 264.1 before 264.14.0; 265.1.0 before 265.7.0; 266.2.0 before 266.8.0 |
| CVE-2019-11271 | 7.8 | Jun 19 | Cloud Foundry BOSH 270.x versions prior to v270.1.1, contain a BOSH Director that does not properly redact credentials when configured to use a MySQL database Affected: 270.0.0 before 270.1.1 |
| CVE-2026-41009 | 5.8 | May 27 | Local Blobstore may allow arbitrary reads/deletes Affected: before 282.1.12 |
| CVE-2026-41704 | 5.0 | May 27 | Compromised VM can make arbitrary blobstore deletes Affected: before 282.1.12 |
Showing 5