Cloud Foundry Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Version

1.6.0	14
1.6.1	14
1.6.2	14
1.6.3	14
1.6.4	14

Remediation

Official Fix	78
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	24

Exploitability

High	0
Functional	0
Proof-of-Concept	2
Unproven	0
Not Defined	100

Access Vector

Not Defined	0
Physical	0
Local	4
Adjacent	0
Network	98

Authentication

Not Defined	0
High	0
Low	46
None	56

User Interaction

Not Defined	0
Required	24
None	78

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	8
≤6	8
≤7	36
≤8	32
≤9	12
≤10	6

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	10
≤6	10
≤7	34
≤8	30
≤9	12
≤10	6

VulDB

≤1	0
≤2	0
≤3	2
≤4	2
≤5	20
≤6	16
≤7	32
≤8	22
≤9	2
≤10	6

NVD

≤1	0
≤2	0
≤3	0
≤4	2
≤5	6
≤6	6
≤7	20
≤8	22
≤9	32
≤10	14

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	8
≤8	4
≤9	16
≤10	4

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	8
<2k	60
<5k	34
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	102
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Versions (321): 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8, 0.9, 0.10, 0.11, 0.12, 0.13, 0.14, 0.15, 0.16, 0.17, 0.18, 0.19, 0.20, 0.21, 0.22, 0.23, 0.24, 0.25, 0.26, 0.27, 0.28, 0.29, 0.35, 0.187, 0.192, 1.0, 1.1, 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.3, 1.4, 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.5, 1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.5.5, 1.5.6, 1.5.7, 1.5.8, 1.5.9, 1.5.11, 1.5.12, 1.5.13, 1.6, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5, 1.6.6, 1.6.7, 1.6.8, 1.6.9, 1.6.11, 1.6.12, 1.6.13, 1.6.14, 1.6.15, 1.6.16, 1.6.17, 1.6.18, 1.6.19, 1.6.21, 1.6.22, 1.6.23, 1.6.24, 1.6.25, 1.6.26, 1.6.27, 1.6.28, 1.6.29, 1.6.31, 1.6.32, 1.6.33, 1.6.34, 1.6.35, 1.6.36, 1.6.37, 1.7, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5, 1.7.6, 1.7.7, 1.7.8, 1.7.9, 1.7.11, 1.7.12, 1.7.13, 1.7.14, 1.7.15, 1.7.16, 1.7.17, 1.7.18, 1.8, 1.9, 1.10, 1.11, 1.12, 1.13, 1.14, 1.15, 1.16, 1.17, 1.18, 1.19, 1.20, 1.21, 1.22, 1.23, 1.24, 1.25, 1.26, 1.27, 1.28, 1.29, 1.30, 1.31, 1.32, 1.33, 1.34, 1.35, 1.36, 1.37, 1.38, 1.39, 1.40, 1.41, 1.42, 1.43, 1.44, 1.45, 1.46, 1.47, 1.48, 1.49, 1.50, 1.51, 1.52, 1.53, 1.54, 1.55, 1.56, 1.57, 1.58, 1.59, 1.60, 1.61, 1.62, 1.63, 1.64, 1.65, 1.66, 1.67, 1.68, 1.69, 1.70, 1.71, 1.72, 1.73, 1.74, 1.75, 1.76, 1.77, 1.78, 1.79, 1.80, 1.81, 1.82, 1.83, 1.84, 1.85, 1.86, 1.87, 1.88, 1.89, 1.90, 2.0, 2.1, 2.2, 2.3, 2.3.1, 2.4, 2.5, 2.5.1, 2.5.2, 2.5.3, 2.5.4, 2.5.5, 2.5.6, 2.5.7, 2.5.8, 2.5.9, 2.6, 2.7, 2.8, 2.9, 2.10, 2.11, 2.12, 2.13, 2.14, 2.15, 2.16, 2.17, 3.0, 4.0, 4.1, 4.2, 4.3, 4.4, 4.5, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5, 4.5.6, 4.6, 4.7, 4.7.1, 4.7.2, 4.7.3, 4.7.4, 4.7.5, 4.8, 4.9, 4.10, 4.10.1, 4.11, 4.12, 4.12.1, 4.12.2, 4.12.3, 4.13, 4.14, 4.15, 4.16, 4.17, 4.18, 4.19, 4.19.1, 7.0, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8, 60.0, 61.0, 62.0, 63.0, 64.0, 70.0, 72.0, 73.0, 73.1, 73.2, 73.3, 74.0, 74.1, 74.2, 74.3, 74.4, 74.5, 74.6, 74.7, 74.8, 74.9, 227, 228, 238, 244, 247, 248, 249, 250, 251, 252, 254, 260, 261.0, 261.1, 261.2, 267.0, 267.1, 267.2, 267.3, 267.4, 267.5, 267.6, 267.7, 267.8, 267.9, 267.10, 267.11, 267.12, 267.13, 270.0, 270.1

Software Type: Cloud Software

Published	Base	Temp	Vulnerability	0day	Today	Exp	Rem	CTI	CVE
09/03/2020	6.3	6.1	Cloud Foundry Routing unusual condition	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-5420
08/21/2020	6.7	6.5	Cloud Foundry Routing Nginx denial of service	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-5416
02/27/2020	7.3	7.2	Cloud Foundry UAA OAuth2 cross-site request forgery	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-5402
02/27/2020	5.3	5.2	Cloud Foundry Routing Gorouter status code	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-5401
02/27/2020	6.3	6.3	Cloud Foundry Cloud Controller Job insufficiently protected credentials	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-5400
02/12/2020	6.1	6.0	Cloud Foundry CredHub Database Connection cleartext transmission	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2020-5399
12/06/2019	7.3	7.2	Cloud Foundry UAA Log Credentials log file	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-11293
11/26/2019	7.3	7.2	Cloud Foundry UAA Log Credentials log file	$0-$5k	$0-$5k	Not Defined	Official Fix	0.09	CVE-2019-11290
11/19/2019	7.7	7.6	Cloud Foundry Routing Nonce input validation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2019-11289
10/23/2019	5.0	4.9	Cloud Foundry UAA SCIM information disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2019-11282
08/09/2019	4.9	4.8	Cloud Foundry UAA SCIM Filter cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-11274
08/05/2019	7.4	7.3	Cloud Foundry UAA 7pk security	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-11270
07/18/2019	5.7	5.6	Cloud Foundry UAA X-Frame-Options input validation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-3794
07/11/2019	5.0	5.0	Cloud Foundry UAA information disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-11268
06/19/2019	7.6	7.5	Cloud Foundry UAA Password Recovery password recovery	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2019-3787
06/19/2019	5.7	5.7	Cloud Foundry BOSH BOSH Director Credentials information disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-11271
04/25/2019	8.6	8.5	Cloud Foundry cf-deployment Java Hijacking input validation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-3801
04/25/2019	7.0	6.9	Cloud Foundry UAA Redirect URI Phishing redirect	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-3788
04/24/2019	6.4	6.1	Cloud Foundry Domain access control	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2019-3789
03/13/2019	7.0	6.9	Cloud Foundry Cloud Controller Bit-Service improper authorization	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-3785
03/07/2019	7.0	6.9	Cloud Foundry Stratos Session session fixiation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2019-3784
03/07/2019	7.9	7.8	Cloud Foundry Stratos Session Store Secret credentials management	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-3783
03/07/2019	6.7	6.6	Cloud Foundry CLI Log credentials management	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2019-3781
03/07/2019	6.6	6.5	Cloud Foundry UAA Email Address improper authentication	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2019-3775
02/20/2019	6.5	6.5	Cloud Foundry Plugin AbstractCloudFoundryPushDescriptor.java information disclosure	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2019-1003025

77 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 77 results.

◂ PreviousOverviewNext ▸

Might our Artificial Intelligence support you?

Check our Alexa App!