Cloud Foundry - vulnerabilities (CVEs)

80 CVEs in 44 products, 2 in the last 30 days, newest from 2026-10-06.

Products

Cf Deployment - 12 CVEs
Uaa Release Oss - 10 CVEs
Uaa - 8 CVEs
Capi - 6 CVEs
Uaa Release - 6 CVEs
Bosh - 5 CVEs
Routing - 5 CVEs
Cf-deployment - 4 CVEs
Cloud Foundry Uaa - 3 CVEs
Garden-runc - 3 CVEs
Cf Cli - 2 CVEs
Cloud Foundry - 2 CVEs
Cloud Foundry Container Runtime Cfcr - 2 CVEs
Credhub - 2 CVEs
Loggregator - 2 CVEs
Routing Release - 2 CVEs
Stratos - 2 CVEs
Bits-service-release - 1 CVEs
Bits Service - 1 CVEs
Bits Service Release - 1 CVEs
Bosh-vsphere-cpi-release - 1 CVEs
Bosh Backup And Restore - 1 CVEs
Bosh System Metrics Server - 1 CVEs
Capi-release - 1 CVEs
Cf-networking - 1 CVEs
Cf-nfs-volume Release - 1 CVEs
Cf Cli Release - 1 CVEs
Cf Networking Release - 1 CVEs
Cf Nfs Volume Release - 1 CVEs
Cf Routing - 1 CVEs
Cloud Controller - 1 CVEs
Cloud Foundry Router - 1 CVEs
Cloudfoundry Uaa - 1 CVEs
Container Runtime - 1 CVEs
Credhub Cli - 1 CVEs
Diego - 1 CVEs
Haproxy-boshrelease - 1 CVEs
Log-cache-release - 1 CVEs
Nfs Volume Release - 1 CVEs
Notifications - 1 CVEs
Smb-volume Release - 1 CVEs
Smb Volume - 1 CVEs
Uua - 1 CVEs
Windows2012r2 Stemcell - 1 CVEs

Newest CVEs of Cloud Foundry

CVE-2026-59357 - CVSS 6.5 (medium), 2026-10-06: Insufficient verification of data authenticity (CWE-345) in the external OIDC login callback in Cloud Foundry UAA v4.5.0 to v79.6.0 (inclusive) allows an…
CVE-2026-59358 - CVSS 7.6 (high), 2026-10-06: Improper authentication (CWE-287) in the OAuth token endpoint in Cloud Foundry UAA allows a remote, authenticated attacker holding a valid user access token…
CVE-2026-41012 - CVSS 7.7 (high), 2026-08-29: Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API…
CVE-2026-59335 - CVSS 8.7 (high), 2026-08-25: Improper handling of case sensitivity (CWE-178) in the identity zone authorization check in the Identity Zone Endpoint in Cloud Foundry UAA allows a remote…
CVE-2026-41005 - CVSS 9 (critical), 2026-06-11: Cloud Foundry UAA incorrectly treated XML encryption to the Service Provider (confidentiality) as a substitute for XML signatures from the Identity Provider…
CVE-2026-41009 - CVSS 5.8 (medium), 2026-05-27: When the director sends a long-running request (e.g. compile_package), the agent's reply JSON is consumed by AgentClient. inject_compile_log (line 332-339)…
CVE-2026-41704 - CVSS 6.8 (medium), 2026-05-27: AgentClient#handle_method (lines 264-303) processes every NATS reply. It calls inject_compile_log (line 273) on every response, which reads…
CVE-2026-22734 - CVSS 8.6 (high), 2026-04-17: Cloud Foundry UUA is vulnerable to a bypass that allows an attacker to obtain a token for any user and gain access to UAA-protected systems. This…
CVE-2025-22246 - CVSS 7.5 (high), 2025-05-13: Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs.
CVE-2025-22216 - CVSS 5.4 (medium), 2025-01-31: A UAA configured with multiple identity zones, does not properly validate session information across those zones. A User authenticated against a corporate IDP…
CVE-2024-38826 - CVSS 5.3 (medium), 2024-11-11: Authenticated users can upload specifically crafted files to leak server resources. This behavior can potentially be used to run a denial of service attack…
CVE-2024-37082 - CVSS 9.1 (critical), 2024-07-03: When deploying Cloud Foundry together with the haproxy-boshrelease and using a non default configuration, it might be possible to craft HTTP requests that…
CVE-2024-22279 - CVSS 7.5 (high), 2024-06-10: Improper handling of requests in Routing Release > v0.273.0 and <= v0.297.0 allows an unauthenticated attacker to degrade the service availability of the…
CVE-2023-34061 - CVSS 7.5 (high), 2024-01-12: Cloud Foundry routing release versions from v0.163.0 to v0.283.0 are vulnerable to a DOS attack. An unauthenticated attacker can use this vulnerability to…
CVE-2023-34041 - CVSS 5.3 (medium), 2023-09-08: Cloud foundry routing release versions prior to 0.278.0 are vulnerable to abuse of HTTP Hop-by-Hop Headers. An unauthenticated attacker can use this…
CVE-2023-20885 - CVSS 6.5 (medium), 2023-06-16: Vulnerability in Cloud Foundry Notifications, Cloud Foundry SMB-volume release, Cloud FOundry cf-nfs-volume release.This issue affects Notifications: All…
CVE-2020-5423 - CVSS 7.5 (high), 2020-12-02: CAPI (Cloud Controller) versions prior to 1.101.0 are vulnerable to a denial-of-service attack in which an unauthenticated malicious attacker can send…
CVE-2020-5422 - CVSS 6.5 (medium), 2020-10-02: BOSH System Metrics Server releases prior to 0.1.0 exposed the UAA password as a flag to a process running on the BOSH director. It exposed the password to…
CVE-2020-5418 - CVSS 4.3 (medium), 2020-09-03: Cloud Foundry CAPI (Cloud Controller) versions prior to 1.98.0 allow authenticated users having only the "cloud_controller.read" scope, but no roles in any…
CVE-2020-5420 - CVSS 7.7 (high), 2020-09-03: Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by…
CVE-2020-5416 - CVSS 7.7 (high), 2020-08-21: Cloud Foundry Routing (Gorouter), versions prior to 0.204.0, when used in a deployment with NGINX reverse proxies in front of the Gorouters, is potentially…
CVE-2020-5417 - CVSS 8.8 (high), 2020-08-21: Cloud Foundry CAPI (Cloud Controller), versions prior to 1.97.0, when used in a deployment where an app domain is also the system domain (which is true in the…
CVE-2020-5400 - CVSS 8 (high), 2020-02-27: Cloud Foundry Cloud Controller (CAPI), versions prior to 1.91.0, logs properties of background jobs when they are run, which may include sensitive information…
CVE-2020-5401 - CVSS 5.3 (medium), 2020-02-27: Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to…
CVE-2020-5402 - CVSS 8.8 (high), 2020-02-27: In Cloud Foundry UAA, versions prior to 74.14.0, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function when…
CVE-2020-5399 - CVSS 7.6 (high), 2020-02-12: Cloud Foundry CredHub, versions prior to 2.5.10, connects to a MySQL database without TLS even when configured to use TLS. A malicious user with access to the…
CVE-2019-11294 - CVSS 4.3 (medium), 2019-12-19: Cloud Foundry Cloud Controller API (CAPI), version 1.88.0, allows space developers to list all global service brokers, including service broker URLs and…
CVE-2019-11293 - CVSS 8.8 (high), 2019-12-06: Cloud Foundry UAA Release, versions prior to v74.10.0, when set to logging level DEBUG, logs client_secret credentials when sent as a query parameter. A…
CVE-2019-11290 - CVSS 8.8 (high), 2019-11-26: Cloud Foundry UAA Release, versions prior to v74.8.0, logs all query parameters to tomcat’s access file. If the query parameters are used to provide…
CVE-2019-11289 - CVSS 8.6 (high), 2019-11-19: Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route…