[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flRCp3qg6C_5BdVA6d0TsjSAMKmy1JK3uiJO6eoF69MI":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":178,"kevVulnerabilities":236,"topProductsByCves":237,"seoMetadata":248,"meta":257},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":177},5628,"cloudfoundry",34,107,0,3173,"2024-06-10","c",[16,22,26,32,38,44,50,55,60,66,71,76,80,85,90,96,101,105,109,113,117,121,125,130,133,138,142,147,152,156,160,164,168,173],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},27700,"cf-release",220,35,"2018-07-11",{"id":23,"product_name":24,"version_count":25,"cve_count":9,"kev_count":11,"last_cve_update":13},27698,"cf-deployment",261,{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":11,"last_cve_update":31},27697,"capi-release",221,22,"2023-05-19",{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":11,"last_cve_update":37},27702,"cloud_foundry_uaa_bosh",197,15,"2017-07-10",{"id":39,"product_name":40,"version_count":41,"cve_count":42,"kev_count":11,"last_cve_update":43},27726,"user_account_and_authentication",276,9,"2023-03-28",{"id":45,"product_name":46,"version_count":47,"cve_count":48,"kev_count":11,"last_cve_update":49},27718,"routing-release",75,8,"2023-09-08",{"id":51,"product_name":52,"version_count":53,"cve_count":54,"kev_count":11,"last_cve_update":13},27719,"routing_release",70,4,{"id":56,"product_name":57,"version_count":58,"cve_count":54,"kev_count":11,"last_cve_update":59},27725,"uaa_release",157,"2019-09-26",{"id":61,"product_name":62,"version_count":63,"cve_count":64,"kev_count":11,"last_cve_update":65},27710,"garden-runc",64,2,"2018-09-18",{"id":67,"product_name":68,"version_count":69,"cve_count":64,"kev_count":11,"last_cve_update":70},27704,"container_runtime",38,"2019-03-08",{"id":72,"product_name":73,"version_count":74,"cve_count":64,"kev_count":11,"last_cve_update":75},27705,"credhub",108,"2020-02-12",{"id":77,"product_name":78,"version_count":10,"cve_count":64,"kev_count":11,"last_cve_update":79},27714,"loggregator","2018-06-06",{"id":81,"product_name":82,"version_count":83,"cve_count":64,"kev_count":11,"last_cve_update":84},27722,"stratos",28,"2019-03-07",{"id":86,"product_name":87,"version_count":88,"cve_count":64,"kev_count":11,"last_cve_update":89},27724,"uaa-release",193,"2017-11-27",{"id":91,"product_name":92,"version_count":93,"cve_count":94,"kev_count":11,"last_cve_update":95},27706,"credhub_cli",39,1,"2019-02-13",{"id":97,"product_name":98,"version_count":99,"cve_count":94,"kev_count":11,"last_cve_update":100},27708,"garden",3,"2018-03-19",{"id":102,"product_name":103,"version_count":94,"cve_count":94,"kev_count":11,"last_cve_update":104},27709,"garden_linux","2017-05-25",{"id":106,"product_name":107,"version_count":54,"cve_count":94,"kev_count":11,"last_cve_update":108},27693,"archiver","2022-12-27",{"id":110,"product_name":111,"version_count":11,"cve_count":94,"kev_count":11,"last_cve_update":112},27711,"garden-runc-release","2018-03-29",{"id":114,"product_name":115,"version_count":94,"cve_count":94,"kev_count":11,"last_cve_update":116},27712,"gorouter","2020-09-03",{"id":118,"product_name":119,"version_count":120,"cve_count":94,"kev_count":11,"last_cve_update":21},27713,"java_buildpack",68,{"id":122,"product_name":123,"version_count":94,"cve_count":94,"kev_count":11,"last_cve_update":124},27695,"bosh_azure_cpi","2017-04-06",{"id":126,"product_name":127,"version_count":128,"cve_count":94,"kev_count":11,"last_cve_update":129},27707,"diego",150,"2023-02-03",{"id":131,"product_name":132,"version_count":11,"cve_count":94,"kev_count":11,"last_cve_update":31},27715,"loggregator-agent",{"id":134,"product_name":135,"version_count":136,"cve_count":94,"kev_count":11,"last_cve_update":137},27716,"nfs_volume_release",87,"2019-09-23",{"id":139,"product_name":140,"version_count":128,"cve_count":94,"kev_count":11,"last_cve_update":141},27717,"php-buildpack","2016-09-18",{"id":143,"product_name":144,"version_count":145,"cve_count":94,"kev_count":11,"last_cve_update":146},27699,"cf-mysql-release",120,"2017-06-13",{"id":148,"product_name":149,"version_count":150,"cve_count":94,"kev_count":11,"last_cve_update":151},27696,"bosh_backup_and_restore",25,"2019-04-24",{"id":153,"product_name":154,"version_count":94,"cve_count":94,"kev_count":11,"last_cve_update":155},27720,"silk-release","2018-03-27",{"id":157,"product_name":158,"version_count":159,"cve_count":94,"kev_count":11,"last_cve_update":146},27721,"staticfile_buildpack",95,{"id":161,"product_name":162,"version_count":54,"cve_count":94,"kev_count":11,"last_cve_update":163},27701,"cloud_controller","2018-04-18",{"id":165,"product_name":166,"version_count":167,"cve_count":94,"kev_count":11,"last_cve_update":84},27703,"command_line_interface",85,{"id":169,"product_name":170,"version_count":171,"cve_count":11,"kev_count":11,"last_cve_update":172},27694,"bosh-azure-cpi",51,null,{"id":174,"product_name":175,"version_count":176,"cve_count":11,"kev_count":11,"last_cve_update":172},27723,"uaa",273,"Cloudfoundry is a technology vendor with 34 tracked products and 107 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[179,187,195,202,207,212,217,222,227,232],{"cveId":180,"description":181,"publishedDate":146,"cvssScore":182,"cvssVersion":183,"severity":184,"isKev":185,"epssScore":186},"CVE-2016-6655","An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31. A command injection vulnerability was discovered in a common script used by many Cloud Foundry components. A malicious user may exploit numerous vectors to execute arbitrary commands on servers running Cloud Foundry.",9.8,"v3.0","Critical",false,0.0341,{"cveId":188,"description":189,"publishedDate":190,"cvssScore":191,"cvssVersion":192,"severity":193,"isKev":185,"epssScore":194},"CVE-2020-15586","Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net\u002Fhttp servers, as demonstrated by the httputil.ReverseProxy Handler, because it reads a request body and writes a response at the same time.","2020-07-17",5.9,"v3.1","Medium",0.02883,{"cveId":196,"description":197,"publishedDate":198,"cvssScore":199,"cvssVersion":183,"severity":200,"isKev":185,"epssScore":201},"CVE-2016-4468","SQL injection vulnerability in Pivotal Cloud Foundry (PCF) before 238; UAA 2.x before 2.7.4.4, 3.x before 3.3.0.2, and 3.4.x before 3.4.1; UAA BOSH before 11.2 and 12.x before 12.2; Elastic Runtime before 1.6.29 and 1.7.x before 1.7.7; and Ops Manager 1.7.x before 1.7.8 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.","2017-04-11",8.8,"High",0.02139,{"cveId":203,"description":204,"publishedDate":205,"cvssScore":199,"cvssVersion":183,"severity":200,"isKev":185,"epssScore":206},"CVE-2016-6651","The UAA \u002Foauth\u002Ftoken endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8, 3.x before 3.3.0.6, and 3.4.x before 3.4.5; UAA BOSH before 11.7 and 12.x before 12.6; Elastic Runtime before 1.6.40, 1.7.x before 1.7.21, and 1.8.x before 1.8.2; and Ops Manager 1.7.x before 1.7.13 and 1.8.x before 1.8.1 allows remote authenticated users to gain privileges by leveraging possession of a token.","2016-09-30",0.01748,{"cveId":208,"description":209,"publishedDate":79,"cvssScore":210,"cvssVersion":183,"severity":200,"isKev":185,"epssScore":211},"CVE-2018-1265","Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin privileges can upload a malicious buildpack that will allow a complete takeover of a Diego Cell VM and access to all apps running on that Diego Cell.",7.2,0.01743,{"cveId":213,"description":214,"publishedDate":137,"cvssScore":215,"cvssVersion":192,"severity":200,"isKev":185,"epssScore":216},"CVE-2019-11277","Cloud Foundry NFS Volume Service, 1.7.x versions prior to 1.7.11 and 2.x versions prior to 2.3.0, is vulnerable to LDAP injection. A remote authenticated malicious space developer can potentially inject LDAP filters via service instance creation, facilitating the malicious space developer to deny service or perform a dictionary attack.",8.1,0.01707,{"cveId":218,"description":219,"publishedDate":141,"cvssScore":220,"cvssVersion":192,"severity":200,"isKev":185,"epssScore":221},"CVE-2016-6639","Cloud Foundry PHP Buildpack (aka php-buildpack) before 4.3.18 and PHP Buildpack Cf-release before 242, as used in Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.6.38 and 1.7.x before 1.7.19 and other products, place the .profile file in the htdocs directory, which might allow remote attackers to obtain sensitive information via an HTTP GET request for this file.",7.5,0.01704,{"cveId":223,"description":224,"publishedDate":225,"cvssScore":220,"cvssVersion":192,"severity":200,"isKev":185,"epssScore":226},"CVE-2016-9882","An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v250 and CAPI-release versions prior to v1.12.0. Cloud Foundry logs the credentials returned from service brokers in Cloud Controller system component logs. These logs are written to disk and often sent to a log aggregator via syslog.","2017-01-13",0.01687,{"cveId":228,"description":229,"publishedDate":104,"cvssScore":230,"cvssVersion":192,"severity":193,"isKev":185,"epssScore":231},"CVE-2015-1834","A path traversal vulnerability was identified in the Cloud Foundry component Cloud Controller that affects cf-release versions prior to v208 and Pivotal Cloud Foundry Elastic Runtime versions prior to 1.4.2. Path traversal is the 'outbreak' of a given directory structure through relative file paths in the user input. It aims at accessing files and directories that are stored outside the web root folder, for disallowed reading or even executing arbitrary system commands. An attacker could use a certain parameter of the file path for instance to inject '..\u002F' sequences in order to navigate through the file system. In this particular case a remote authenticated attacker can exploit the identified vulnerability in order to upload arbitrary files to the server running a Cloud Controller instance - outside the isolated application container.",6.5,0.01685,{"cveId":233,"description":234,"publishedDate":104,"cvssScore":182,"cvssVersion":192,"severity":184,"isKev":185,"epssScore":235},"CVE-2016-0761","Cloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to 1.6.17 contain a flaw in managing container files during Docker image preparation that could be used to delete, corrupt or overwrite host files and directories, including other container filesystems on the host.",0.01605,[],[238,239,240,241,242,243,244,245,246,247],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":23,"product_name":24,"version_count":25,"cve_count":9,"kev_count":11,"last_cve_update":13},{"id":27,"product_name":28,"version_count":29,"cve_count":30,"kev_count":11,"last_cve_update":31},{"id":33,"product_name":34,"version_count":35,"cve_count":36,"kev_count":11,"last_cve_update":37},{"id":39,"product_name":40,"version_count":41,"cve_count":42,"kev_count":11,"last_cve_update":43},{"id":45,"product_name":46,"version_count":47,"cve_count":48,"kev_count":11,"last_cve_update":49},{"id":51,"product_name":52,"version_count":53,"cve_count":54,"kev_count":11,"last_cve_update":13},{"id":56,"product_name":57,"version_count":58,"cve_count":54,"kev_count":11,"last_cve_update":59},{"id":61,"product_name":62,"version_count":63,"cve_count":64,"kev_count":11,"last_cve_update":65},{"id":67,"product_name":68,"version_count":69,"cve_count":64,"kev_count":11,"last_cve_update":70},{"title":249,"metaDescription":250,"keywords":251,"structuredData":252},"Cloudfoundry - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Cloudfoundry covering 34 products with 107 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Cloudfoundry vulnerabilities, Cloudfoundry security, Cloudfoundry CVE, Cloudfoundry threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":253,"@type":254,"name":255,"description":250,"url":256},"https:\u002F\u002Fschema.org","Organization","Cloudfoundry","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcloudfoundry",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":258,"apiVersion":259},"2026-10-18T13:12:49.925Z","3.0"]