Pivotal Software Cloud Foundry Cf-Release vulnerabilities

2 CVEs affecting Pivotal Software Cloud Foundry Cf-Release, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1192, published 2018-02-01.

More from Pivotal Software.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-1192, published 2018-02-01. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. In Cloud Foundry Foundation cf-release versions prior to v285; cf-deployment versions prior to v1.7; UAA 4.5.x versions prior to 4.5.5, 4.8.x versions prior to 4.8.3, and 4.7.x versions prior to…
• CVE-2017-4963, published 2017-06-13. High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days. An issue was discovered in Cloud Foundry Foundation Cloud Foundry release v252 and earlier versions, UAA stand-alone release v2.0.0 - v2.7.4.12 & v3.0.0 - v3.11.0, and UAA bosh release v26 & earlier…