CF
Product
Cf-release
35
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 13Medium 15Low 1
Watch
Add Cf-release to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-8034 | 6.6 | Jul 17 | The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0, Routing-release versions prior to v0.159.0, CF-release versions prior to v267) do… Affected: through 266 |
| CVE-2017-14389 | 6.5 | Nov 28 | An issue was discovered in Cloud Foundry Foundation capi-release (all versions prior to 1.45.0), cf-release (all versions prior to v280), and cf-deployment (all versions prior to… Affected: before 280 |
| CVE-2017-4974 | 6.5 | Jun 13 | An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to v2.7.4.15, 3.6.x versions prior to v3.6.9, 3.9.x versions… Affected: through v257 |
| CVE-2016-8219 | 6.5 | Jun 13 | An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to 1.12.0 Affected: before 250 |
| CVE-2016-2165 | 6.5 | May 25 | The Loggregator Traffic Controller endpoints in cf-release v231 and lower, Pivotal Elastic Runtime versions prior to 1.5.19 AND 1.6.x versions prior to 1.6.20 are not cleansing… Affected: through 231 |
| CVE-2015-1834 | 6.5 | May 25 | A path traversal vulnerability was identified in the Cloud Foundry component Cloud Controller that affects cf-release versions prior to v208 and Pivotal Cloud Foundry Elastic… Affected: through 207 |
| CVE-2017-4969 | 6.5 | Apr 20 | The Cloud Controller in Cloud Foundry cf-release versions prior to v255 allows authenticated developer users to exceed memory and disk quotas for tasks Affected: through 254 |
| CVE-2018-1190 | 6.1 | Jan 4 | An issue was discovered in these Pivotal Cloud Foundry products: all versions prior to cf-release v270, UAA v3.x prior to v3.20.2, and UAA bosh v30.x versions prior to v30.8 and… Affected: through 269 |
| CVE-2017-8047 | 6.1 | Oct 4 | In Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all versions prior to v274, in some applications, it is possible to append a combination of… Affected: through 273 |
| CVE-2015-3190 | 6.1 | May 25 | With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the UAA logout link is… Affected: through 209 |
| CVE-2016-0708 | 5.9 | Jul 11 | Applications deployed to Cloud Foundry, versions v166 through v227, may be vulnerable to a remote disclosure of information, including, but not limited to environment variables… Affected: 166 through 227 |
| CVE-2017-4970 | 5.9 | Jun 13 | An issue was discovered in Cloud Foundry Foundation cf-release v255 and Staticfile buildpack versions v1.4.0 - v1.4.3 Affected: 255 |
| CVE-2016-2169 | 5.3 | Apr 18 | Cloud Foundry Cloud Controller, capi-release versions prior to 1.0.0 and cf-release versions prior to v237, contain a business logic flaw Affected: before 237 |
| CVE-2017-8031 | 5.3 | Nov 27 | An issue was discovered in Cloud Foundry Foundation cf-release (all versions prior to v279) and UAA (30.x versions prior to 30.6, 45.x versions prior to 45.4, 52.x versions prior… Affected: through 278 |
| CVE-2016-0713 | 4.7 | Aug 31 | Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests Affected: 141; 142; 143; 144; 145; 146; +34 more |
Showing 15