Vulnerabilities in Cloud Foundry
80 resultsCVE-2023-34061HIGHCVE-2023-34061 – Gorouter route pruningEPSS 0.5%CVE-2026-59335HIGHCase-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA CompromiseEPSS 0.5%CVE-2020-5399HIGHCredHub does not properly enable TLS for MySQL database connectionsEPSS 0.5%CVE-2020-5402HIGHUAA fails to check the state parameter when authenticating with external IDPsEPSS 0.5%CVE-2023-34041MEDIUMCVE-2023-34041-Abuse of HTTP Hop-by-Hop Headers in Cloud Foundry GorouterEPSS 0.4%CVE-2026-59358HIGHUAA OAuth Token Endpoint Vulnerability allows user access token reuse for client_credentials grant typeEPSS 0.4%CVE-2024-22279MEDIUMGoRouter Denial of Service AttackEPSS 0.4%CVE-2024-38826MEDIUMCVE-2024-38826 Cloud Controller Denial of Service AttackEPSS 0.4%CVE-2026-22734HIGHCloud Foundry UAA SAML 2.0 Signature BypassEPSS 0.4%CVE-2019-3782MEDIUMCredHub CLI writes environment variable credentials to diskEPSS 0.4%CVE-2026-59396MEDIUMDoS Vulnerability in UAA Related to JWKS URI HandlingEPSS 0.3%CVE-2019-11271MEDIUMBosh Deployment logs leak sensitive informationEPSS 0.3%CVE-2026-59387HIGHBroken access control restriction in Cloud Controller APIEPSS 0.2%CVE-2026-59386MEDIUMCredential exposure to space supporterEPSS 0.2%CVE-2025-22246LOWCVE-2025-22246 – UAA Private Key ExposureEPSS 0.2%CVE-2025-22216MEDIUMCVE-2025-22216 UAA Missing Zone ValidationEPSS 0.2%CVE-2026-59357MEDIUMSelf-UAA OIDC Configuration allows JWT injection to establish unauthorized sessionsEPSS 0.2%CVE-2026-59385LOWSpace Developer can extract space-scoped broker credentialsEPSS 0.2%CVE-2026-41005CRITICALUAA accepts SAML Encrypted Assertions authentication bypassEPSS 0.1%CVE-2026-41012HIGHBOSH vSphere CPI Improper Cert ValidationEPSS 0.1%