Read the docs

Cloud Foundry

Records84All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high47CVSS 7.0–8.9

Exploited now

Cloud Foundry records in CISA KEV

No Cloud Foundry vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bosh 5 records LOW Bits Service 1 record LOW Bosh System Metrics Server 1 record LOW Cf-networking 1 record MEDIUM Diego 1 record LOW

Records

1 record in Cf-networking · all components

TI-2018-11236 CVE-2018-15755 · GHSA-m392-rj9c-4gwh

CF networking internal policy server SQL injection

Priority MEDIUM 41

Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01282 Published 2018-10-12 Fixed in 2.16.0 CWE-89
Open these records in search →