cloudfoundry cf-deployment

Name: cloudfoundry cf-deployment
Brand: cloudfoundry

productUS

cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical18high15medium0low

updated 2026-10-28

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-15586US	medium5.9	2.88% (87th)	—	13.7.0	2020-07-17	< 13.7.0
CVE-2018-1265US	high7.2	1.74% (78th)	—	1.37.0	2018-06-06	< 1.37.0
CVE-2019-11277US	high8.1	1.71% (77th)	—	11.1.0	2019-09-23	< 11.1.0
CVE-2019-11289US	high8.6	1.51% (74th)	—	12.8.0	2019-11-19	< 12.8.0
CVE-2019-11283US	high8.8	1.46% (73rd)	—	12.2.0	2019-10-23	< 12.2.0
CVE-2019-11293US	medium6.5	1.32% (71st)	—	12.12.0	2019-12-06	< 12.12.0
CVE-2018-1262US	high7.2	1.29% (70th)	—	no fix	2018-05-15	1.27.0 → 1.31.0
CVE-2019-11290US	high7.5	1.28% (70th)	—	12.10.0	2019-11-26	< 12.10.0
CVE-2020-5416US	medium6.5	1.24% (69th)	—	13.13.0	2020-08-21	< 13.13.0
CVE-2018-1221US	high8.1	1.21% (68th)	—	1.14.0	2018-03-19	< 1.14.0
CVE-2020-5420US	high7.7	1.18% (68th)	—	13.15.0	2020-09-03	< 13.15.0
CVE-2020-5423US	high7.5	1.15% (67th)	—	15.0.0	2020-12-02	< 15.0.0
CVE-2019-11282US	medium4.3	1.14% (66th)	—	12.2.0	2019-10-23	< 12.2.0
CVE-2018-1193US	medium5.3	1.11% (66th)	—	1.27.0	2018-05-23	< 1.27.0
CVE-2018-1277US	medium6.5	1.10% (65th)	—	1.28.0	2018-04-30	< 1.28.0
CVE-2021-22101US	high7.5	1.00% (63rd)	—	16.24.0	2021-10-27	< 16.24.0
CVE-2020-5417US	high8.8	0.99% (62nd)	—	13.12.0	2020-08-21	< 13.12.0
CVE-2021-22001US	high7.5	0.99% (62nd)	—	16.18.0	2021-07-22	< 16.18.0
CVE-2018-1195US	high8.8	0.98% (62nd)	—	1.3.0	2018-03-19	< 1.3.0
CVE-2017-14389US	medium6.5	0.95% (61st)	—	1.0.0	2017-11-28	< 1.0.0
CVE-2018-1191US	high8.8	0.92% (60th)	—	1.9.0	2018-03-29	< 1.9.0
CVE-2021-22100US	medium5.3	0.92% (60th)	—	17.1.0	2022-03-25	< 17.1.0
CVE-2021-22115US	medium6.5	0.84% (58th)	—	16.2.0	2021-04-08	< 16.2.0
CVE-2019-11294US	medium4.3OT elevated	0.78% (56th)	—	12.7.0	2019-12-19	< 12.7.0
CVE-2020-5400US	medium6.5	0.75% (55th)	—	12.33.0	2020-02-27	< 12.33.0
CVE-2021-22098US	medium6.1	0.71% (53rd)	—	16.20.0	2021-08-11	< 16.20.0
CVE-2019-3801US	critical9.8OT elevated	0.59% (48th)	—	7.9.0	2019-04-25	< 7.9.0
CVE-2023-20882US	medium5.9	0.58% (48th)	—	29.0.0	2023-05-26	27.4.0 → 29.0.0
CVE-2020-5418US	medium4.3OT elevated	0.57% (47th)	—	13.17.0	2020-09-03	< 13.17.0
CVE-2020-5402US	high8.8	0.49% (42nd)	—	12.33.0	2020-02-27	< 12.33.0
CVE-2023-34041US	medium5.3	0.44% (38th)	—	32.4.0	2023-09-08	< 32.4.0
CVE-2024-22279US	high7.5	0.40% (34th)	—	no fix	2024-06-10	30.9.0 → 40.13.0
CVE-2022-31733US	critical9.1	0.38% (32nd)	—	no fix	2023-02-03	17.1 → 23.2.0
CVE-2023-20881US	high8.1	0.36% (30th)	—	no fix	2023-05-19	24.7.0 → 29.0.0
CVE-2026-22723US	—	0.23% (14th)	—	no fix	2026-03-05	2 versions
CVE-2025-22246US	high7.5	0.20% (10th)	—	49.0.0	2025-05-13	45.1.0 → 49.0.0
CVE-2026-22726US	—	0.20% (10th)	—	55.0.0	2026-05-01	0.0.2 → 55.0.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption5 CVEs
CWE-532Insertion of Sensitive Information into Log File5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-266Incorrect Privilege Assignment2 CVEs
CWE-295Improper Certificate Validation2 CVEs
CWE-522Insufficiently Protected Credentials2 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE37 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan