Skip to content

Product

Cloud Foundry cf-networking vulnerabilities

1 published CVE affecting Cloud Foundry cf-networking, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest Cloud Foundry cf-networking CVEs

Newest publication first

  1. CVE-2018-15755 CF networking internal policy server SQL injection

    Published
    HighCVSS 8.8 EPSS 1.3%

    Cloud Foundry CF Networking Release, versions 2.11.0 prior to 2.16.0, contain an internal api endpoint vulnerable to SQL injection between Diego cells and the policy server. A remote authenticated malicious user with mTLS certs can issue arbitrary SQL queries and gain access to t...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.