cloudfoundry cf-release

Name: cloudfoundry cf-release
Brand: cloudfoundry

productUS

cpe:2.3:a:cloudfoundry:cf-release:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

6critical13high15medium1low

updated 2026-10-28

vulnerabilities (35)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-6655US	critical9.8	3.41% (89th)	—	no fix	2017-06-13	≤ 244
CVE-2016-9882US	high7.5	1.69% (77th)	—	no fix	2017-01-13	≤ 249
CVE-2015-1834US	medium6.5	1.69% (77th)	—	no fix	2017-05-25	≤ 207
CVE-2016-0708US	medium5.9	1.56% (75th)	—	no fix	2018-07-11	166 → 227
CVE-2017-8037US	high7.5	1.42% (73rd)	—	no fix	2017-08-21	25 versions
CVE-2017-8035US	high7.5	1.39% (72nd)	—	268	2017-07-25	245 → 268
CVE-2016-8218US	critical9.8	1.30% (70th)	—	no fix	2017-06-13	28 versions
CVE-2017-8048US	high7.8	1.24% (69th)	—	no fix	2017-10-04	6 versions
CVE-2016-0780US	high7.5	1.24% (69th)	—	no fix	2017-05-25	= 231
CVE-2015-5172US	critical9.8	1.17% (67th)	—	216	2017-10-24	< 216
CVE-2015-5171US	critical9.8	1.17% (67th)	—	216	2017-10-24	< 216
CVE-2017-4992US	critical9.8	1.17% (67th)	—	no fix	2017-06-13	≤ 260
CVE-2016-0732US	high8.8	1.15% (67th)	—	no fix	2017-09-07	208 → 229
CVE-2017-8031US	medium5.3	1.09% (65th)	—	no fix	2017-11-27	≤ 278
CVE-2017-4972US	high7.5	1.08% (65th)	—	no fix	2017-06-13	≤ 256
CVE-2015-5173US	high8.8	1.03% (64th)	—	216	2017-10-24	< 216
CVE-2017-8033US	high7.8	1.02% (63rd)	—	268	2017-07-25	< 268
CVE-2018-1195US	high8.8	0.98% (62nd)	—	283	2018-03-19	< 283
CVE-2017-4974US	medium6.5	0.97% (62nd)	—	no fix	2017-06-13	≤ v257
CVE-2016-8219US	medium6.5	0.97% (62nd)	—	250	2017-06-13	< 250
CVE-2016-2169US	medium5.3	0.97% (62nd)	—	237	2018-04-18	< 237
CVE-2017-14389US	medium6.5	0.95% (61st)	—	280	2017-11-28	< 280
CVE-2017-4991US	high7.2	0.94% (61st)	—	no fix	2017-06-13	≤ 259
CVE-2017-4969US	medium6.5	0.94% (61st)	—	no fix	2017-04-20	≤ 254
CVE-2016-6658US	critical9.6	0.87% (58th)	—	245	2018-03-29	< 245
CVE-2016-2165US	medium6.5	0.86% (58th)	—	no fix	2017-05-25	≤ 231
CVE-2018-1190US	medium6.1	0.83% (57th)	—	no fix	2018-01-04	≤ 269
CVE-2015-3189US	low3.7	0.82% (57th)	—	no fix	2017-05-25	≤ 208
CVE-2017-8047US	medium6.1	0.78% (56th)	—	no fix	2017-10-04	≤ 273
CVE-2015-5170US	high8.8	0.76% (55th)	—	216	2017-10-24	< 216
CVE-2017-8034US	medium6.6	0.75% (55th)	—	no fix	2017-07-17	≤ 266
CVE-2015-3190US	medium6.1	0.72% (54th)	—	no fix	2017-05-25	≤ 209
CVE-2017-4970US	medium5.9	0.69% (53rd)	—	no fix	2017-06-13	= 255
CVE-2016-0713US	medium4.7	0.54% (45th)	—	no fix	2017-08-31	88 versions
CVE-2015-3191US	high8.8	0.49% (42nd)	—	no fix	2017-05-25	≤ 209

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-269Improper Privilege Management4 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-266Incorrect Privilege Assignment2 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')2 CVEs
CWE-613Insufficient Session Expiration2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE35 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan