Login Request a demo
CA
Product
Capi-release
by Cloudfoundry · last CVE May 19, 2023
22
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities22In the news0Timeline
Severity mix
Critical 0High 13Medium 9Low 0
Severity
All severities22Critical0High13Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Capi-release to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-8034
6.6
1%
Jul 17
The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0, Routing-release versions prior to v0.159.0, CF-release versions prior to v267) do…
Affected: through 1.31.0
CVE-2021-22115
6.5
1%
Apr 8
Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config field is changed
Affected: before 1.106.0
CVE-2020-5400
6.5
1%
Feb 27
Cloud Foundry Cloud Controller (CAPI), versions prior to 1.91.0, logs properties of background jobs when they are run, which may include sensitive information such as credentials…
Affected: before 1.91.0
CVE-2017-14389
6.5
1%
Nov 28
An issue was discovered in Cloud Foundry Foundation capi-release (all versions prior to 1.45.0), cf-release (all versions prior to v280), and cf-deployment (all versions prior to…
Affected: before 1.45.0
CVE-2016-8219
6.5
1%
Jun 13
An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to 1.12.0
Affected: before 1.12.0
CVE-2021-22100
5.3
1%
Mar 25
In cloud foundry CAPI versions prior to 1.122, a denial-of-service attack in which a developer can push a service broker that (accidentally or maliciously) causes CC instances to…
Affected: before 1.122.0
CVE-2016-2169
5.3
1%
Apr 18
Cloud Foundry Cloud Controller, capi-release versions prior to 1.0.0 and cf-release versions prior to v237, contain a business logic flaw
Affected: before 1.0.0
CVE-2020-5418
4.3
1%
Sep 3
Cloud Foundry CAPI (Cloud Controller) versions prior to 1.98.0 allow authenticated users having only the "cloud_controller.read" scope, but no roles in any spaces, to list all…
Affected: before 1.98.0
CVE-2019-11294
4.3
1%
Dec 19
Cloud Foundry Cloud Controller API (CAPI), version 1.88.0, allows space developers to list all global service brokers, including service broker URLs and GUIDs, which should only…
Affected: 1.88.0
Showing 9