Cloud Foundry

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

1. An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31. A command injection vulnerability was…CVE-2016-6655Cloudfoundry · 3.4% likely

   CWE-77

2. Applications deployed to Cloud Foundry, versions v166 through v227, may be vulnerable to a remote disclosure of information, including, but not limited to environment variables an…CVE-2016-0708Cloud Foundry · 1.6% likely

   CWE-200

3. In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf-release versions after v244 and prior to v270, there is an incomplete fix for CVE-2017-8…CVE-2017-8037Cloudfoundry · 1.4% likely

   CWE-200

4. An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JW…CVE-2016-8218Cloudfoundry · 1.3% likely

   CWE-20

5. An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions…CVE-2017-4992Cloudfoundry · 1.2% likely

   CWE-269

6. An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA release 2.x versions prior to v2.7.4.18, 3.6.x versions prior to v3.6.12, 3.9.x versions…CVE-2017-4994Cloudfoundry · 1.1% likely

   CWE-20

7. An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to 1.12.0. A user with the SpaceAuditor role is over-privilege…CVE-2016-8219Cloudfoundry · 1.0% likely

   CWE-269

8. The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0, Routing-release versions prior to v0.159.0, CF-release versions prior to v267) do no…CVE-2017-8034Cloudfoundry · 0.8% likely

   CWE-565

9. An issue was discovered in Cloud Foundry Foundation cf-release v255 and Staticfile buildpack versions v1.4.0 - v1.4.3. A regression introduced in the Static file build pack causes…CVE-2017-4970Cloudfoundry · 0.7% likely
10. This disclosure regards a vulnerability related to UAA refresh tokens and external identity providers.Assuming that an external identity provider is linked to the UAA, a refresh t…CVE-2023-20903Cloudfoundry · CVSS 4.3 · 0.4% likely

    CWE-613

11. CVE-2024-38826 Cloud Controller Denial of Service AttackCVE-2024-38826Cloud Foundry · CVSS 5.3 · 0.4% likely

    CWE-400

12. Cloud Foundry unprotected internal endpointsCVE-2026-22727Cloudfoundry · CVSS 7.5 · 0.2% likely

    CWE-306

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.