Cloudfoundry
Security Risk Profile
62
/100
highSecurity Risk Score
Comprehensive risk assessment based on 114 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 18, 2016 to present
114
Total CVEs
75
Critical+High
0
Exploited
56
Unpatched
Threat Assessment
Avg CVSS
7.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
56
Critical/High
Risk Level
62/100
high
📈 4 in Last 30 Days
Severity Distribution
Critical
12High
63Medium
39Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Infoleak
10
2
Input Validation
6
3
XSS
6
4
Path Traversal
5
5
CSRF
4
Most Affected Products
1. Pivotal Software Cloud Foundry Uaa364
2. Pivotal Software Cloud Foundry Elastic Runtime321
3. Cloudfoundry Cloud Foundry Uaa Bosh213
4. cloudfoundry Cf-release125
5. Cloudfoundry Cf-release53
Recent Vulnerabilities
See more →CVE-2026-47829
CVSS 7.7high
Argument Injection in BOSH CLI Allows Local Command Execution on Operator Workstations via Compromised Director
7/9/2026🔧 No Patch
CVE-2026-47828
CVSS 8.9high
Missing TLS Certificate Verification in BOSH CLI Allows Root Code Execution via Man-in-the-Middle Credential Replay
7/9/2026🔧 No Patch
CVE-2026-47826
CVSS 8.5high
blobs.yaml Path Traversal Allows File Writes
7/9/2026🔧 No Patch
CVE-2026-41857
CVSS 7.1high
BOSH CLI Shell Injection
7/9/2026🔧 No Patch
CVE-2026-22726
CVSS 5.0medium
Route Services Firewall Bypass
4/30/2026🔧 No Patch
CVE-2026-22723
CVSS 6.5medium
UAA User Token Revocation logic error
3/5/2026
CVE-2025-22246
CVSS 7.5high
– UAA Private Key Exposure
5/13/2025🔧 No Patch
CVE-2024-22279
CVSS 7.5high
GoRouter Denial of Service Attack
6/10/2024🔧 No Patch
CVE-2023-34041
CVSS 5.3medium
9/8/2023🔧 No Patch
CVE-2023-20882
CVSS 5.9medium
5/26/2023🔧 No Patch
Monitor Cloudfoundry in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.