Pivotal Software Cloud Foundry Cf vulnerabilities

3 CVEs affecting Pivotal Software Cloud Foundry Cf, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-8032, published 2017-07-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-4994, published 2017-06-13. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA release 2.x versions prior to v2.7.4.18, 3.6.x versions prior to v3.6.12, 3.9.x versions prior to v3.9.14,…
CVE-2017-4973, published 2017-06-13. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10,…
CVE-2017-8032, published 2017-07-10. Medium severity, CVSS 6.6. EPSS: 0.9% chance of exploitation in the next 30 days. In Cloud Foundry cf-release versions prior to v264; UAA release all versions of UAA v2.x.x, 3.6.x versions prior to v3.6.13, 3.9.x versions prior to v3.9.15, 3.20.x versions prior to v3.20.0, and…