# cve.now: Cloud Foundry

The newest entries naming Cloud Foundry as an affected vendor (up to 200), of 80 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-59387](https://cve.now/CVE-2026-59387.md): Broken access control restriction in Cloud Controller API (CVSS 8.8)
- [CVE-2026-59385](https://cve.now/CVE-2026-59385.md): Space Developer can extract space-scoped broker credentials (CVSS 2.7)
- [CVE-2026-59386](https://cve.now/CVE-2026-59386.md): Credential exposure to space supporter (CVSS 6.5)
- [CVE-2026-59396](https://cve.now/CVE-2026-59396.md): DoS Vulnerability in UAA Related to JWKS URI Handling (CVSS 6.9)
- [CVE-2026-59357](https://cve.now/CVE-2026-59357.md): Self-UAA OIDC Configuration allows JWT injection to establish unauthorized sessions (CVSS 6.5)
- [CVE-2026-59358](https://cve.now/CVE-2026-59358.md): UAA OAuth Token Endpoint Vulnerability allows user access token reuse for client\_credentials grant type (CVSS 7.6)
- [CVE-2026-41012](https://cve.now/CVE-2026-41012.md): BOSH vSphere CPI Improper Cert Validation (CVSS 7.7)
- [CVE-2026-59335](https://cve.now/CVE-2026-59335.md): Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromise (CVSS 8.7)
- [CVE-2026-41005](https://cve.now/CVE-2026-41005.md): UAA accepts SAML Encrypted Assertions authentication bypass (CVSS 9.0)
- [CVE-2026-22734](https://cve.now/CVE-2026-22734.md): Cloud Foundry UAA SAML 2.0 Signature Bypass (CVSS 8.6)
- [CVE-2025-22246](https://cve.now/CVE-2025-22246.md): CVE-2025-22246 – UAA Private Key Exposure (CVSS 3.0)
- [CVE-2025-22216](https://cve.now/CVE-2025-22216.md): CVE-2025-22216 UAA Missing Zone Validation (CVSS 5.4)
- [CVE-2024-38826](https://cve.now/CVE-2024-38826.md): CVE-2024-38826 Cloud Controller Denial of Service Attack (CVSS 5.3)
- [CVE-2024-37082](https://cve.now/CVE-2024-37082.md): When deploying Cloud Foundry together with the haproxy-boshrelease and using a non default configuration, it might be possible to craft HTTP (CVSS 9.1)
- [CVE-2024-22279](https://cve.now/CVE-2024-22279.md): GoRouter Denial of Service Attack (CVSS 5.9)
- [CVE-2023-34061](https://cve.now/CVE-2023-34061.md): CVE-2023-34061 – Gorouter route pruning (CVSS 7.5)
- [CVE-2023-34041](https://cve.now/CVE-2023-34041.md): CVE-2023-34041-Abuse of HTTP Hop-by-Hop Headers in Cloud Foundry Gorouter (CVSS 5.3)
- [CVE-2023-20885](https://cve.now/CVE-2023-20885.md): CF workflows leak credentials in system audit logs (CVSS 6.5)
- [CVE-2020-5423](https://cve.now/CVE-2020-5423.md): Cloud Controller is vulnerable to denial of service via YAML parsing (CVSS 7.5)
- [CVE-2020-5422](https://cve.now/CVE-2020-5422.md): UAA password may appear in BOSH System Metrics Server process arguments (no CVSS)
- [CVE-2020-5420](https://cve.now/CVE-2020-5420.md): Gorouter is vulnerable to DoS attack via invalid HTTP responses (CVSS 7.7)
- [CVE-2020-5418](https://cve.now/CVE-2020-5418.md): Cloud Controller allows users with no roles to list droplets (CVSS 3.1)
- [CVE-2020-5417](https://cve.now/CVE-2020-5417.md): Cloud Controller may allow developers to claim sensitive routes (CVSS 8.5)
- [CVE-2020-5416](https://cve.now/CVE-2020-5416.md): CF clusters with NGINX in front of them may be vulnerable to DoS (CVSS 7.7)
- [CVE-2020-5402](https://cve.now/CVE-2020-5402.md): UAA fails to check the state parameter when authenticating with external IDPs (CVSS 8.8)
- [CVE-2020-5401](https://cve.now/CVE-2020-5401.md): Cloud Foundry GoRouter is vulnerable to cache poisoning (CVSS 5.3)
- [CVE-2020-5400](https://cve.now/CVE-2020-5400.md): Cloud Controller logs environment variables from app manifests (CVSS 8.0)
- [CVE-2020-5399](https://cve.now/CVE-2020-5399.md): CredHub does not properly enable TLS for MySQL database connections (CVSS 7.6)
- [CVE-2019-11294](https://cve.now/CVE-2019-11294.md): CAPI leaks service broker URLs and GUIDs to space developers (CVSS 4.3)
- [CVE-2019-11293](https://cve.now/CVE-2019-11293.md): UAA logs all query parameters with debug logging level (CVSS 8.8)
- [CVE-2019-11290](https://cve.now/CVE-2019-11290.md): Cloud Foundry UAA logs query parameters in tomcat access file (CVSS 8.8)
- [CVE-2019-11289](https://cve.now/CVE-2019-11289.md): A forged route service request using an invalid nonce can cause the gorouter to panic and crash (CVSS 8.6)
- [CVE-2019-11283](https://cve.now/CVE-2019-11283.md): Password leak in smbdriver logs (CVSS 8.8)
- [CVE-2019-11282](https://cve.now/CVE-2019-11282.md): UAA is vulnerable to a Blind SCIM injection leading to information disclosure (CVSS 4.3)
- [CVE-2019-11279](https://cve.now/CVE-2019-11279.md): Privilege Escalation via Scope Manipulation in UAA (CVSS 8.7)
- [CVE-2019-11278](https://cve.now/CVE-2019-11278.md): Privilege Escalation via Blind SCIM Injection in UAA (CVSS 8.7)
- [CVE-2019-11277](https://cve.now/CVE-2019-11277.md): Volume Services is vulnerable to an LDAP injection attack (CVSS 8.4)
- [CVE-2019-11274](https://cve.now/CVE-2019-11274.md): UAA SCIM Filter XSS (CVSS 4.3)
- [CVE-2019-3800](https://cve.now/CVE-2019-3800.md): CF CLI writes the client id and secret to config file (CVSS 6.3)
- [CVE-2019-11270](https://cve.now/CVE-2019-11270.md): UAA clients.write vulnerability (CVSS 7.3)
- [CVE-2019-3794](https://cve.now/CVE-2019-3794.md): UAA - Login app subject to clickjacking attack (CVSS 6.5)
- [CVE-2019-11268](https://cve.now/CVE-2019-11268.md): UAA SQL Identity Zone Vulnerability (CVSS 6.5)
- [CVE-2019-3787](https://cve.now/CVE-2019-3787.md): UAA defaults email address to an insecure domain (CVSS 8.3)
- [CVE-2019-11271](https://cve.now/CVE-2019-11271.md): Bosh Deployment logs leak sensitive information (CVSS 6.0)
- [CVE-2019-3801](https://cve.now/CVE-2019-3801.md): Java Projects using HTTP to fetch dependencies (CVSS 8.7)
- [CVE-2019-3788](https://cve.now/CVE-2019-3788.md): UAA redirect-uri allows wildcard in the subdomain (CVSS 8.7)
- [CVE-2019-3789](https://cve.now/CVE-2019-3789.md): Gorouter allows space developer to hijack route services hosted outside the platform (CVSS 8.8)
- [CVE-2019-3786](https://cve.now/CVE-2019-3786.md): BBR could run arbitrary scripts on deployment VMs (CVSS 7.7)
- [CVE-2019-3798](https://cve.now/CVE-2019-3798.md): Escalation of Privileges in Cloud Controller (CVSS 6.0)
- [CVE-2019-3785](https://cve.now/CVE-2019-3785.md): Cloud Controller provides signed URL with write authorization to read only user (CVSS 6.5)
- [CVE-2019-3780](https://cve.now/CVE-2019-3780.md): Cloud Foundry Container Runtime Leaks IAAS Credentials (CVSS 9.1)
- [CVE-2019-3779](https://cve.now/CVE-2019-3779.md): Cloud Foundry Container Runtime allows a user to bypass security policy when talking to ETCD (CVSS 8.8)
- [CVE-2019-3784](https://cve.now/CVE-2019-3784.md): Cloud Foundry Stratos contains a Session Collision Vulnerability (CVSS 8.2)
- [CVE-2019-3783](https://cve.now/CVE-2019-3783.md): Cloud Foundry Stratos Deploys With Public Default Session Store Secret (CVSS 8.7)
- [CVE-2019-3781](https://cve.now/CVE-2019-3781.md): CF CLI does not sanitize user's password in verbose/trace/debug (CVSS 8.2)
- [CVE-2019-3775](https://cve.now/CVE-2019-3775.md): UAA allows users to modify their own email address (CVSS 7.1)
- [CVE-2019-3782](https://cve.now/CVE-2019-3782.md): CredHub CLI writes environment variable credentials to disk (CVSS 6.3)
- [CVE-2018-15754](https://cve.now/CVE-2018-15754.md): UAA can issue tokens across identity providers if users with matching usernames exist (CVSS 4.2)
- [CVE-2018-15800](https://cve.now/CVE-2018-15800.md): Timing attack allows extraction of signing key in Bits Service (CVSS 8.1)
- [CVE-2018-15797](https://cve.now/CVE-2018-15797.md): NFS Volume release errand leaks cf admin credentials in logs (CVSS 8.4)
- [CVE-2018-15761](https://cve.now/CVE-2018-15761.md): UAA Privilege Escalation (CVSS 9.9)
- [CVE-2018-15796](https://cve.now/CVE-2018-15796.md): Signing Key Extraction in Bits Service Release (CVSS 8.1)
- [CVE-2018-15755](https://cve.now/CVE-2018-15755.md): CF networking internal policy server SQL injection (CVSS 6.6)
- [CVE-2018-1264](https://cve.now/CVE-2018-1264.md): Log Cache logs UAA client secret on startup (CVSS 9.1)
- [CVE-2018-11083](https://cve.now/CVE-2018-11083.md): Bosh accepts refresh tokens in place of an access token (CVSS 8.4)
- [CVE-2018-11082](https://cve.now/CVE-2018-11082.md): Cloud Foundry UAA MFA does not prevent brute force of MFA code (CVSS 6.6)
- [CVE-2018-11084](https://cve.now/CVE-2018-11084.md): Garden-runC prevents deletion of some app environments (CVSS 6.8)
- [CVE-2018-1223](https://cve.now/CVE-2018-1223.md): Cloud Foundry Container Runtime (kubo-release), versions prior to 0.14.0, may leak UAA and vCenter credentials to application logs. (no CVSS)
- [CVE-2018-11047](https://cve.now/CVE-2018-11047.md): Cloud Foundry UAA, versions 4.19 prior to 4.19.2 and 4.12 prior to 4.12.4 and 4.10 prior to 4.10.2 and 4.7 prior to 4.7.6 and 4.5 prior to 4 (no CVSS)
- [CVE-2016-0708](https://cve.now/CVE-2016-0708.md): Applications deployed to Cloud Foundry, versions v166 through v227, may be vulnerable to a remote disclosure of information, including, but (no CVSS)
- [CVE-2018-11041](https://cve.now/CVE-2018-11041.md): Cloud Foundry UAA, versions later than 4.6.0 and prior to 4.19.0 except 4.10.1 and 4.7.5 and uaa-release versions later than v48 and prior t (no CVSS)
- [CVE-2018-1269](https://cve.now/CVE-2018-1269.md): Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to (no CVSS)
- [CVE-2018-1268](https://cve.now/CVE-2018-1268.md): Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to (no CVSS)
- [CVE-2018-1265](https://cve.now/CVE-2018-1265.md): Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. (no CVSS)
- [CVE-2018-1193](https://cve.now/CVE-2018-1193.md): Cloud Foundry routing-release, versions prior to 0.175.0, lacks sanitization for user-provided X-Forwarded-Proto headers. (no CVSS)
- [CVE-2018-1276](https://cve.now/CVE-2018-1276.md): Windows 2012R2 stemcells, versions prior to 1200.17, contain an information exposure vulnerability on vSphere. (no CVSS)
- [CVE-2018-1262](https://cve.now/CVE-2018-1262.md): Cloud Foundry Foundation UAA, versions 4.12.X and 4.13.X, introduced a feature which could allow privilege escalation across identity zones (no CVSS)
- [CVE-2018-1277](https://cve.now/CVE-2018-1277.md): Cloud Foundry Garden-runC, versions prior to 1.13.0, does not correctly enforce disc quotas for Docker image layers. (no CVSS)
- [CVE-2016-2169](https://cve.now/CVE-2016-2169.md): Cloud Foundry Cloud Controller, capi-release versions prior to 1.0.0 and cf-release versions prior to v237, contain a business logic flaw. (no CVSS)
- [CVE-2018-1191](https://cve.now/CVE-2018-1191.md): Cloud Foundry Garden-runC, versions prior to 1.11.0, contains an information exposure vulnerability. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/cloud-foundry
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.