cloudfoundry user account and authentication

Name: cloudfoundry user account and authentication
Brand: cloudfoundry

productUS

cpe:2.3:a:cloudfoundry:user_account_and_authentication:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical5high4medium0low

updated 2026-10-25

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-11278US	high8.8	1.34% (71st)	—	74.1.0	2019-09-26	< 74.1.0
CVE-2019-11293US	medium6.5	1.32% (71st)	—	74.10.0	2019-12-06	< 74.10.0
CVE-2019-11290US	high7.5	1.28% (70th)	—	74.8.0	2019-11-26	< 74.8.0
CVE-2016-0732US	high8.8	1.15% (67th)	—	no fix	2017-09-07	33 versions
CVE-2021-22001US	high7.5	0.99% (62nd)	—	75.3.0	2021-07-22	< 75.3.0
CVE-2019-11274US	medium6.1	0.80% (56th)	—	74.0.0	2019-08-09	< 74.0.0
CVE-2021-22098US	medium6.1	0.71% (53rd)	—	75.5.0	2021-08-11	< 75.5.0
CVE-2020-5402US	high8.8	0.49% (41st)	—	74.14.0	2020-02-27	< 74.14.0
CVE-2023-20903US	medium4.3	0.40% (34th)	—	no fix	2023-03-28	—

The flaw types (CWEs) most of these CVEs share.

CWE-532Insertion of Sensitive Information into Log File2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')1 CVEs
CWE-613Insufficient Session Expiration1 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.