CVE-2016-6655: Cloudfoundry Cf-MySQL-Release

Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days.

An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31. A command injection vulnerability was discovered in a common script used by many Cloud Foundry components. A malicious user may exploit numerous vectors to execute arbitrary commands on servers running Cloud Foundry.

Affected products

• Cloudfoundry Cf-MySQL-Release: up to and including 30
• Cloudfoundry Cf-Release: up to and including 244

Published 2017-06-13. Last modified 2026-06-17.