Known Vulnerabilities for products from Cloud Foundry
Listed below are 7 of the newest known vulnerabilities associated with the vendor "Cloud Foundry".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-22734 json | Not Provided | 2026-04-17 | 2026-04-16 | |
| CVE-2020-5422 json | BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH direct... | 6.5 - MEDIUM | 2020-10-02 | 2020-10-14 |
| CVE-2019-11271 json | Cloud Foundry BOSH 270.x versions prior to v270.1.1, contain a BOSH Director that does not properly redact credentials when c... | 7.8 - HIGH | 2019-06-19 | 2020-10-16 |
| CVE-2018-15800 json | Cloud Foundry Bits Service, versions prior to 2.18.0, includes an information disclosure vulnerability. A remote malicious us... | 6.8 - MEDIUM | 2018-12-10 | 2019-10-09 |
| CVE-2018-15755 json | Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL inje... | 8.8 - HIGH | 2018-10-12 | 2019-10-09 |
| CVE-2018-11083 json | Cloud Foundry BOSH, versions v264 prior to v264.14.0 and v265 prior to v265.7.0 and v266 prior to v266.8.0 and v267 prior to ... | 8.1 - HIGH | 2018-10-05 | 2020-01-17 |
| CVE-2017-4961 json | An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. In cer... | 8.8 - HIGH | 2017-06-13 | 2019-10-03 |
| CVE-2016-3091 json | Cloud Foundry Diego 0.1468.0 through 0.1470.0 allows remote attackers to cause a denial of service. | 7.5 - HIGH | 2017-06-08 | 2017-06-15 |
Known software with vulnerabilities from Cloud Foundry
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Cloud Foundry | Bits Service | 1.1.0 |
| Application | Cloud Foundry | Bosh | 258 |
| Application | Cloud Foundry | Bosh System Metrics Server | 0.1.0 |
| Application | Cloud Foundry | Cf-networking | 0.1.0 |
| Application | Cloud Foundry | Loggregator | 100 |