CF
Product
Cloud Foundry Elastic Runtime
28
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 10Medium 9Low 1
Watch
Add Cloud Foundry Elastic Runtime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-5172 | 9.8 | Oct 24 | Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by… Affected: before 1.7.0 |
| CVE-2015-5171 | 9.8 | Oct 24 | The password change functionality in Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to… Affected: before 1.7.0 |
| CVE-2017-4955 | 9.8 | Jun 13 | An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, 1.8.x versions prior to 1.8.28, and 1.9.x versions prior to… Affected: 1.6.0; 1.6.1; 1.6.2; 1.6.3; 1.6.4; 1.6.5; +34 more |
| CVE-2017-2773 | 9.8 | Jun 13 | An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.60, 1.7.x versions prior to 1.7.41, 1.8.x versions prior to 1.8.23, and 1.9.x versions prior to… Affected: 1.6.0; 1.6.1; 1.6.2; 1.6.3; 1.6.4; 1.6.5; +34 more |
| CVE-2016-0761 | 9.8 | May 25 | Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to 1.6.17 contain a flaw in managing container files during Docker image preparation… Affected: 1.6.0; 1.6.1; 1.6.2; 1.6.3; 1.6.4; 1.6.5; +11 more |
| CVE-2016-5006 | 9.8 | May 2 | The Cloud Controller in Cloud Foundry before 239 logs user-provided service objects at creation, which allows attackers to obtain sensitive user credential information via… Affected: through 1.6.32; 1.7.0; 1.7.1; 1.7.2; 1.7.3; 1.7.4; +6 more |
| CVE-2016-6658 | 9.6 | Mar 29 | Applications in cf-release before 245 can be configured and pushed with a user-provided custom buildpack using a URL pointing to the buildpack Affected: before 1.6.49; 1.7.0 before 1.7.31; 1.8.0 before 1.8.11 |
| CVE-2016-6637 | 9.6 | Sep 30 | Multiple cross-site request forgery (CSRF) vulnerabilities in Pivotal Cloud Foundry (PCF) before 242; UAA 2.x before 2.7.4.7, 3.x before 3.3.0.5, and 3.4.x before 3.4.4; UAA BOSH… Affected: 1.6.0; 1.6.1; 1.6.2; 1.6.3; 1.6.4; 1.6.5; +34 more |
Showing 8