Cf Deployment
Approved changes feed: RSS · Atom
cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cloudfoundry (3aa6768c-437d-5100-a420-b037598cadb4) |
|---|---|
| Product | Cf Deployment (699fd778-3d3e-581b-bf98-1f97930f00f0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/cloudfoundry/cf-deployment |
purl2cpe | 2026-06-01 10:12:04.927216 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-22726 |
vulnerable | 2026-06-08 07:51:13.724811 |
Route Services Firewall Bypass
MEDIUM (5)
Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules. As a result, a malicious developer with access to Cloudfoundry could configure a route-service that would allow it to send requests to HTTP services on internal networks reachable by the Gorouter, which may not have previously had direct access from outside networks, or from the application.
Routing release: affected from v0.118.0 through v0.371.0 (inclusive); upgrade to v0.372.0 or greater. CF Deployment: affected from v0.0.2 through v54.14.0 (inclusive); upgrade to v55.0.0 or greater (includes routing_release v0.372.0).
Published: 2026-04-30T23:17:00.707Z
Updated: 2026-05-01T14:19:13.594Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22723 |
vulnerable | 2026-06-08 07:51:13.721447 |
UAA User Token Revocation logic error
MEDIUM (6.5)
Inappropriate user token revocation due to a logic error in the token revocation endpoint implementation in Cloudfoundry UAA v77.30.0 to v78.7.0 and in Cloudfoundry Deployment v48.7.0 to v54.10.0.
Published: 2026-03-05T20:40:27.743Z
Updated: 2026-05-10T13:31:44.832Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22246 |
vulnerable | 2026-06-08 07:10:52.531294 |
CVE-2025-22246 – UAA Private Key Exposure
LOW (3)
Cloud Foundry UAA release versions from v77.21.0 to v7.31.0 are vulnerable to a private key exposure in logs.
Published: 2025-05-13T05:14:40.968Z
Updated: 2025-05-13T13:49:09.193Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22279 |
vulnerable | 2026-06-08 06:29:34.414818 |
GoRouter Denial of Service Attack
MEDIUM (5.9)
Improper handling of requests in Routing Release > v0.273.0 and <= v0.297.0 allows an unauthenticated attacker to degrade
the service availability of the Cloud Foundry deployment if performed at scale.
Published: 2024-06-10T19:47:43.939Z
Updated: 2024-08-01T22:43:34.216Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34041 |
vulnerable | 2026-06-08 06:06:24.267149 |
CVE-2023-34041-Abuse of HTTP Hop-by-Hop Headers in Cloud Foundry Gorouter
MEDIUM (5.3)
Cloud foundry routing release versions prior to 0.278.0 are vulnerable to abuse of HTTP Hop-by-Hop Headers. An unauthenticated attacker can use this vulnerability for headers like B3 or X-B3-SpanID to affect the identification value recorded in the logs in foundations.
Published: 2023-09-08T07:22:00.607Z
Updated: 2024-08-02T15:54:14.253Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-20882 |
vulnerable | 2026-06-08 05:54:18.030627 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-20881 |
vulnerable | 2026-06-08 05:54:18.028612 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31733 |
vulnerable | 2026-06-08 05:44:41.648932 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22115 |
vulnerable | 2026-06-08 05:29:59.815313 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22101 |
vulnerable | 2026-06-08 05:29:59.799691 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22100 |
vulnerable | 2026-06-08 05:29:59.798139 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22098 |
vulnerable | 2026-06-08 05:29:59.796085 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22001 |
vulnerable | 2026-06-08 05:29:59.604596 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5423 |
vulnerable | 2026-06-08 05:26:42.880701 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5420 |
vulnerable | 2026-06-08 05:26:42.830099 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5418 |
vulnerable | 2026-06-08 05:26:42.824483 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5417 |
vulnerable | 2026-06-08 05:26:42.823987 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5416 |
vulnerable | 2026-06-08 05:26:42.820098 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5402 |
vulnerable | 2026-06-08 05:26:42.780659 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5400 |
vulnerable | 2026-06-08 05:26:42.776847 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15586 |
vulnerable | 2026-06-08 05:19:26.146055 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3801 |
vulnerable | 2026-06-08 05:13:56.056842 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11294 |
vulnerable | 2026-06-08 05:12:36.832983 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11293 |
vulnerable | 2026-06-08 05:12:36.829615 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11290 |
vulnerable | 2026-06-08 05:12:36.824280 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11289 |
vulnerable | 2026-06-08 05:12:36.822926 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11283 |
vulnerable | 2026-06-08 05:12:36.807147 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11282 |
vulnerable | 2026-06-08 05:12:36.805545 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11277 |
vulnerable | 2026-06-08 05:12:36.793244 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1277 |
vulnerable | 2026-06-08 05:11:17.453356 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1265 |
vulnerable | 2026-06-08 05:11:17.389478 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1262 |
vulnerable | 2026-06-08 05:11:17.384331 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1221 |
vulnerable | 2026-06-08 05:11:17.220048 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1195 |
vulnerable | 2026-06-08 05:11:17.160734 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1193 |
vulnerable | 2026-06-08 05:11:17.157840 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1191 |
vulnerable | 2026-06-08 05:11:17.150293 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14389 |
vulnerable | 2026-06-08 05:08:49.884219 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.