CVE-2017-4964: Cloudfoundry Bosh Azure Cpi

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Cloud Foundry Foundation BOSH Azure CPI v22 could potentially allow a maliciously crafted stemcell to execute arbitrary code on VMs created by the director, aka a "CPI code injection vulnerability."

Affected products

• Cloudfoundry Bosh Azure Cpi: version 22 only

Published 2017-04-06. Last modified 2026-06-17.