CF
Product
Cloud Foundry Elastic Runtime
28
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 10Medium 9Low 1
Watch
Add Cloud Foundry Elastic Runtime to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-5173 | 8.8 | Oct 24 | Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact via vectors… Affected: before 1.7.0 |
| CVE-2015-5170 | 8.8 | Oct 24 | Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow remote attackers to conduct cross-site request… Affected: before 1.7.0 |
| CVE-2017-4959 | 8.8 | Jun 13 | An issue was discovered in Pivotal PCF Elastic Runtime 1.8.x versions prior to 1.8.29 and 1.9.x versions prior to 1.9.7 Affected: 1.8.0; 1.8.1; 1.8.2; 1.8.3; 1.8.4; 1.8.5; +30 more |
| CVE-2015-3191 | 8.8 | May 25 | With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier the change_email form… Affected: through 1.4.5 |
| CVE-2016-4468 | 8.8 | Apr 11 | SQL injection vulnerability in Pivotal Cloud Foundry (PCF) before 238; UAA 2.x before 2.7.4.4, 3.x before 3.3.0.2, and 3.4.x before 3.4.1; UAA BOSH before 11.2 and 12.x before… Affected: 1.6.0; 1.6.1; 1.6.2; 1.6.3; 1.6.4; 1.6.5; +30 more |
| CVE-2016-6651 | 8.8 | Sep 30 | The UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8, 3.x before 3.3.0.6, and 3.4.x before 3.4.5; UAA BOSH before 11.7 and 12.x before… Affected: 1.6.0; 1.6.1; 1.6.2; 1.6.3; 1.6.4; 1.6.5; +34 more |
| CVE-2016-3084 | 8.1 | May 25 | The UAA reset password flow in Cloud Foundry release v236 and earlier versions, UAA release v3.3.0 and earlier versions, all versions of Login-server, UAA release v10 and earlier… Affected: through 1.7.1 |
| CVE-2016-0780 | 7.5 | May 25 | It was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x versions prior to 1.5.17 and Pivotal Cloud Foundry Elastic Runtime 1.6.x versions… Affected: 1.5.0; 1.5.1; 1.5.2; 1.5.3; 1.5.4; 1.5.5; +29 more |
| CVE-2016-6657 | 7.4 | Dec 16 | An open redirect vulnerability has been detected with some Pivotal Cloud Foundry Elastic Runtime components Affected: 1.8.0; 1.8.1; 1.8.2; 1.8.3; 1.8.4; 1.8.5; +7 more |
| CVE-2016-0896 | 7.3 | Sep 18 | Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.34 and 1.7.x before 1.7.12 places 169.254.0.0/16 in the all_open Application Security Group, which might allow remote… Affected: through 1.6.33; 1.7.0; 1.7.1; 1.7.2; 1.7.3; 1.7.4; +7 more |
Showing 10