Access Control

Every one of the 21 is a mark on the map. Named now: 1 to 21, most at risk first.

1. UAA can issue tokens across identity providers if users with matching usernames existCVE-2018-15754Cloud Foundry · CVSS 4.2 · 1.8% likely

   CWE-863

2. Cloud Controller provides signed URL with write authorization to read only userCVE-2019-3785Cloud Foundry · CVSS 6.5 · 1.3% likely

   CWE-285

3. An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions…CVE-2017-4992Cloudfoundry · 1.2% likely

   CWE-269

4. UAA clients.write vulnerabilityCVE-2019-11270Cloud Foundry · CVSS 7.3 · 1.1% likely

   CWE-269

5. UAA - Login app subject to clickjacking attackCVE-2019-3794Cloud Foundry · CVSS 6.5 · 1.1% likely

   CWE-284

6. An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions…CVE-2017-4973Cloudfoundry · 1.1% likely

   CWE-269

7. Cloud Foundry UAA, versions 4.19 prior to 4.19.2 and 4.12 prior to 4.12.4 and 4.10 prior to 4.10.2 and 4.7 prior to 4.7.6 and 4.5 prior to 4.5.7, incorrectly authorizes requests t…CVE-2018-11047Cloud Foundry · 1.1% likely

   CWE-863

8. Cloud Controller may allow developers to claim sensitive routesCVE-2020-5417Cloud Foundry · CVSS 8.5 · 1.0% likely

   CWE-732

9. Cloud Foundry Silk CNI plugin, versions prior to 0.2.0, contains an improper access control vulnerability. If the platform is configured with an application security group (ASG) t…CVE-2018-1267Cloudfoundry · 1.0% likely

   CWE-732

10. An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to 1.12.0. A user with the SpaceAuditor role is over-privilege…CVE-2016-8219Cloudfoundry · 1.0% likely

    CWE-269

11. An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v260; UAA release 2.x versions prior to v2.7.4.16, 3.6.x versions prior to v3.6.10, 3.9.x versions…CVE-2017-4991Cloudfoundry · 0.9% likely

    CWE-269

12. The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0, Routing-release versions prior to v0.159.0, CF-release versions prior to v267) do no…CVE-2017-8034Cloudfoundry · 0.8% likely

    CWE-565

13. Cloud Foundry Container Runtime allows a user to bypass security policy when talking to ETCDCVE-2019-3779Cloud Foundry · CVSS 8.8 · 0.7% likely

    CWE-284

14. BBR could run arbitrary scripts on deployment VMsCVE-2019-3786Cloud Foundry · CVSS 7.7 · 0.6% likely

    CWE-269

15. Cloud Controller allows users with no roles to list dropletsCVE-2020-5418Cloud Foundry · CVSS 3.1 · 0.6% likely

    CWE-863

16. Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.adminCVE-2026-47839Cloud Foundry Foundation · CVSS 9.2 · 0.3% likely

    CWE-284

17. Broken access control restriction in Cloud Controller APICVE-2026-59387Cloud Foundry · CVSS 8.8 · 0.2% likely

    CWE-284

18. Credential exposure to space supporterCVE-2026-59386Cloud Foundry · CVSS 6.5 · 0.2% likely

    CWE-269

19. Route Services Firewall BypassCVE-2026-22726CloudFoundry Foundation · CVSS 5 · 0.2% likely

    CWE-923

20. Incorrect Permission Assignment Allows Local Privilege Escalation to SYSTEM via Executable OverwriteCVE-2026-47830Cloud Foundry Foundation · CVSS 8.5 · 0.1% likely

    CWE-732

21. Compromised VM can make arbitrary blobstore deletesCVE-2026-41704Cloud Foundry Foundation · CVSS 5 · 0.1% likely

    CWE-284

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.