CAPI

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Cloud Controller provides signed URL with write authorization to read only userCVE-2019-3785Cloud Foundry · CVSS 6.5 · 1.3% likely

   CWE-285

2. Cloud Controller is vulnerable to denial of service via YAML parsingCVE-2020-5423Cloud Foundry · CVSS 7.5 · 1.1% likely

   CWE-400

3. Cloud Controller may allow developers to claim sensitive routesCVE-2020-5417Cloud Foundry · CVSS 8.5 · 1.0% likely

   CWE-732

4. CAPI leaks service broker URLs and GUIDs to space developersCVE-2019-11294Cloud Foundry · CVSS 4.3 · 0.8% likely

   CWE-200

5. Cloud Controller logs environment variables from app manifestsCVE-2020-5400Cloud Foundry · CVSS 8 · 0.8% likely

   CWE-522

6. Cloud Controller allows users with no roles to list dropletsCVE-2020-5418Cloud Foundry · CVSS 3.1 · 0.6% likely

   CWE-863

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.