pivotal software cloud foundry elastic runtime

Name: pivotal software cloud foundry elastic runtime
Brand: pivotal software

productUS

cpe:2.3:a:pivotal_software:cloud_foundry_elastic_runtime:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

8critical10high9medium1low

updated 2026-10-28

vulnerabilities (28)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-4468US	high8.8	2.14% (82nd)	Exploit	no fix	2017-04-11	36 versions
CVE-2017-2773US	critical9.8	2.13% (82nd)	—	no fix	2017-06-13	123 versions
CVE-2016-6651US	high8.8	1.75% (78th)	—	no fix	2016-09-30	60 versions
CVE-2015-1834US	medium6.5	1.69% (77th)	—	no fix	2017-05-25	≤ 1.4.1
CVE-2016-0761US	critical9.8	1.60% (76th)	—	no fix	2017-05-25	17 versions
CVE-2017-4955US	critical9.8	1.41% (73rd)	—	no fix	2017-06-13	143 versions
CVE-2016-6636US	medium5.3	1.39% (72nd)	—	no fix	2016-09-30	60 versions
CVE-2017-4959US	high8.8	1.26% (69th)	—	no fix	2017-06-13	36 versions
CVE-2016-0715US	medium5.9	1.25% (69th)	—	no fix	2018-09-11	3 versions
CVE-2016-0780US	high7.5	1.24% (69th)	—	no fix	2017-05-25	35 versions
CVE-2016-3084US	high8.1	1.19% (68th)	—	no fix	2017-05-25	≤ 1.7.1
CVE-2015-5172US	critical9.8	1.17% (67th)	—	1.7.0	2017-10-24	< 1.7.0
CVE-2015-5171US	critical9.8	1.17% (67th)	—	1.7.0	2017-10-24	< 1.7.0
CVE-2016-5006US	critical9.8	1.14% (67th)	—	no fix	2017-05-02	12 versions
CVE-2016-0926US	medium6.1	1.12% (66th)	—	1.6.32	2016-09-18	2 versions
CVE-2016-6657US	high7.4	1.05% (64th)	—	no fix	2016-12-16	13 versions
CVE-2015-5173US	high8.8	1.03% (64th)	—	1.7.0	2017-10-24	< 1.7.0
CVE-2016-5016US	medium5.9	1.03% (64th)	—	1.7.13	2017-04-24	2 versions
CVE-2016-0927US	medium6.1	1.02% (63rd)	—	no fix	2016-09-18	16 versions
CVE-2016-0896US	high7.3	1.00% (63rd)	—	no fix	2016-09-18	13 versions
CVE-2016-6658US	critical9.6	0.87% (59th)	—	1.8.11	2018-03-29	3 versions
CVE-2016-2165US	medium6.5	0.86% (58th)	—	no fix	2017-05-25	21 versions
CVE-2015-3189US	low3.7	0.82% (57th)	—	no fix	2017-05-25	≤ 1.4.5
CVE-2015-5170US	high8.8	0.76% (55th)	—	1.7.0	2017-10-24	< 1.7.0
CVE-2016-6637US	critical9.6	0.73% (54th)	—	no fix	2016-09-30	60 versions
CVE-2015-3190US	medium6.1	0.72% (54th)	—	no fix	2017-05-25	≤ 1.4.5
CVE-2016-0781US	medium6.1	0.66% (51st)	—	no fix	2017-05-25	20 versions
CVE-2015-3191US	high8.8	0.49% (42nd)	—	no fix	2017-05-25	≤ 1.4.5

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-352Cross-Site Request Forgery (CSRF)3 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-264CWE-2642 CVEs
CWE-640Weak Password Recovery Mechanism for Forgotten Password2 CVEs
CWE-19CWE-191 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE28 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan