Known vulnerabilities in CF Deployment

Vendor: Cloud Foundry Foundation
Software: CF Deployment
Software CPE: cpe:2.3:a:cloud_foundry_foundation:cf_deployment:*:*:*:*:*:*:*:*
Website: https://www.cloudfoundry.org/
Total vulnerabilities: 23
Public exploits: 3
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting CF Deployment CF Deployment is affected by 23 known vulnerabilities: 1 critical, 6 high, 12 medium, 4 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58976 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-45046		 CWE-94 High
Available
Exploited
 17.1.0 15.12.2021 SB2021121504
SB2021121511
SB2021121512
and 178 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Available
Exploited
 17.1.0 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU55668 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-36221		 CWE-362 Medium
No
No
 16.22.0 10.08.2021 SB2021081001
SB2021081217
SB2021081219
and 32 more
#VU51640 - Incorrect Default Permissions
CVE-2021-24032		 CWE-276 High
No
No
 16.7.0 23.03.2021 SB2021030435
SB2021032304
SB2021030815
and 4 more
#VU51639 - Incorrect Default Permissions
CVE-2021-24031		 CWE-276 High
No
No
 16.7.0 23.03.2021 SB2021030434
SB2021032304
SB2021030815
and 3 more
#VU51456 - Integer overflow
CVE-2021-27219		 CWE-190 Low
No
No
 16.7.0 15.03.2021 SB2021021524
SB2021032305
SB2021053117
and 40 more
#VU51455 - Incorrect Conversion between Numeric Types
CVE-2021-27218		 CWE-681 Low
No
No
 16.7.0 15.03.2021 SB2021021523
SB2021032305
SB2021070711
and 25 more
#VU51337 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-21300		 CWE-94 High
Available
Exploited
 16.7.0 09.03.2021 SB2021030943
SB2021031217
SB2021031303
and 17 more
#VU50621 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-27619		 CWE-94 Medium
No
No
 16.7.0 11.02.2021 SB2020112330
SB2021032307
SB2021032607
and 24 more
#VU49973 - Memory corruption
CVE-2021-3177		 CWE-119 High
No
No
 16.7.0 19.01.2021 SB2021012516
SB2021012517
SB2021022418
and 54 more
#VU48746 - Improper input validation
CVE-2020-5423		 CWE-20 Medium
No
No
 15.0.0 02.12.2020 SB2020120207
SB2020120208
#VU46658 - Improper input validation
CVE-2020-5420		 CWE-20 Medium
No
No
 13.15.0 11.09.2020 SB2020090382
SB2020091117
#VU46181 - Incorrect Permission Assignment for Critical Resource
CVE-2020-5417		 CWE-732 Medium
No
No
 13.12.0 01.09.2020 SB2020090120
SB2020111701
#VU46180 - Resource exhaustion
CVE-2020-5416		 CWE-400 Medium
No
No
 13.13.0 01.09.2020 SB2020090119
#VU25807 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-1935		 CWE-444 Medium
No
No
 12.40.0 06.03.2020 SB2020022111
SB2020031401
SB2020031402
and 15 more
#VU25806 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-17569		 CWE-444 Medium
No
No
 12.40.0 06.03.2020 SB2020022111
SB2020031401
SB2020031402
and 6 more
#VU25577 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-5401		 CWE-451 Medium
No
No
 12.27.0 25.02.2020 SB2020022508
#VU25574 - Cleartext Storage of Sensitive Information
CVE-2020-5400		 CWE-312 Medium
No
No
 12.33.0 25.02.2020 SB2020022507
#VU25502 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-1938		 CWE-22 High
Available
Exploited
 12.40.0 21.02.2020 SB2020022111
SB2020031401
SB2020031402
and 31 more
#VU25002 - Session Fixation
CVE-2019-17563		 CWE-384 Low
No
No
 12.40.0 06.02.2020 SB2019121315
SB2020011492
SB2020011519
and 16 more


Showing elements 1 - 20 out of 23